SecuriteInfo.com signature update for securiteinfo.hdb (Professional, Gold and Reseller edition) Reference : https://www.securiteinfo.com/clamav-antivirus/published-updates/ ### Generic signatures added/modified : SecuriteInfo.com.Iframe-13 SecuriteInfo.com.Iframe-142 SecuriteInfo.com.Iframe-1859 SecuriteInfo.com.Iframe.Gen-125 SecuriteInfo.com.Iframe.Gen-5 SecuriteInfo.com.JS.Obfus-1596 SecuriteInfo.com.JS.Obfus-161 SecuriteInfo.com.JS.Obfus-2641 SecuriteInfo.com.JS.Obfus-460 SecuriteInfo.com.JS.Obfus-463 SecuriteInfo.com.JS.Obfus-511 SecuriteInfo.com.JS.Obfus-913 SecuriteInfo.com.VBS.Downloader-10 SecuriteInfo.com.BackDoor.Meterpreter-1 SecuriteInfo.com.BAT.Mousedisabled-1 SecuriteInfo.com.HTML-4469 SecuriteInfo.com.HTML-4881 SecuriteInfo.com.Trojan.GenericKD.35217119 SecuriteInfo.com.Trojan.PWS.Salat-1 SecuriteInfo.com.Trojan.Siggen5.6234 ### Generic signatures removed due to Clamav detection SecuriteInfo.com.HTML-58637 SecuriteInfo.com.HTML-58638 SecuriteInfo.com.HTML-58641 SecuriteInfo.com.HTML-58642 SecuriteInfo.com.HTML-58647 SecuriteInfo.com.HTML-58648 SecuriteInfo.com.SHeur4.KDI SecuriteInfo.com.SHeur4.KXK SecuriteInfo.com.SHeur4.MCX SecuriteInfo.com.SHeur4.MFE SecuriteInfo.com.SHeur4.MKR SecuriteInfo.com.SHeur4.MLL SecuriteInfo.com.SHeur4.MNJ SecuriteInfo.com.SHeur4.MPN SecuriteInfo.com.SHeur4.NAJ SecuriteInfo.com.SHeur4.NNW SecuriteInfo.com.SHeur4.NPG SecuriteInfo.com.SHeur4.NVY SecuriteInfo.com.SHeur4.OAG SecuriteInfo.com.SHeur4.OXQ SecuriteInfo.com.SHeur4.PIW SecuriteInfo.com.SHeur4.PJW SecuriteInfo.com.SHeur4.PJZ SecuriteInfo.com.SHeur4.PQB SecuriteInfo.com.SHeur4.QDE SecuriteInfo.com.SHeur4.QHU SecuriteInfo.com.SHeur4.QKW SecuriteInfo.com.SHeur4.QNX SecuriteInfo.com.SHeur4.QQH SecuriteInfo.com.SHeur4.QYU SecuriteInfo.com.SHeur4.RBN SecuriteInfo.com.SHeur4.REX SecuriteInfo.com.SHeur4.RJV SecuriteInfo.com.SHeur4.SBL SecuriteInfo.com.Trojan.PWS.Lumma.2229 SecuriteInfo.com.Trojan.PWS.Siggen3.40477 ### Generic signatures removed due to internal optimisation ### Signatures removed due to generic signatures : SecuriteInfo.com.BackDoor.Meterpreter.157.13006.17565 SecuriteInfo.com.BackDoor.Meterpreter.157.15986.14938 SecuriteInfo.com.BackDoor.Meterpreter.227.10330.9718 SecuriteInfo.com.BackDoor.Meterpreter.227.11836.20863 SecuriteInfo.com.BackDoor.Meterpreter.227.20516.32024 SecuriteInfo.com.BackDoor.Meterpreter.227.29966.23349 SecuriteInfo.com.BackDoor.Meterpreter.227.30115.31430 SecuriteInfo.com.BackDoor.Meterpreter.227.31449.1406 SecuriteInfo.com.BackDoor.Meterpreter.227.4036.7262 SecuriteInfo.com.BackDoor.Meterpreter.240.10704.18887 SecuriteInfo.com.BackDoor.Meterpreter.240.10837.14691 SecuriteInfo.com.BackDoor.Meterpreter.240.10936.31527 SecuriteInfo.com.BackDoor.Meterpreter.240.11795.32180 SecuriteInfo.com.BackDoor.Meterpreter.240.12858.4781 SecuriteInfo.com.BackDoor.Meterpreter.240.13859.18946 SecuriteInfo.com.BackDoor.Meterpreter.240.14380.13772 SecuriteInfo.com.BackDoor.Meterpreter.240.15156239 SecuriteInfo.com.BackDoor.Meterpreter.240.15206.18687 SecuriteInfo.com.BackDoor.Meterpreter.240.16669.2155 SecuriteInfo.com.BackDoor.Meterpreter.240.16712.12930 SecuriteInfo.com.BackDoor.Meterpreter.240.16722.4852 SecuriteInfo.com.BackDoor.Meterpreter.240.17265356 SecuriteInfo.com.BackDoor.Meterpreter.240.18135428 SecuriteInfo.com.BackDoor.Meterpreter.240.19540.25026 SecuriteInfo.com.BackDoor.Meterpreter.240.19634.3606 SecuriteInfo.com.BackDoor.Meterpreter.240.2063.1146 SecuriteInfo.com.BackDoor.Meterpreter.240.2115.19312 SecuriteInfo.com.BackDoor.Meterpreter.240.21156.21168 SecuriteInfo.com.BackDoor.Meterpreter.240.21192.1251 SecuriteInfo.com.BackDoor.Meterpreter.240.21648.7909 SecuriteInfo.com.BackDoor.Meterpreter.240.23483.12514 SecuriteInfo.com.BackDoor.Meterpreter.240.24054.2197 SecuriteInfo.com.BackDoor.Meterpreter.240.24668.7700 SecuriteInfo.com.BackDoor.Meterpreter.240.25377.8560 SecuriteInfo.com.BackDoor.Meterpreter.240.25548.31290 SecuriteInfo.com.BackDoor.Meterpreter.240.26508.9924 SecuriteInfo.com.BackDoor.Meterpreter.240.27505.13803 SecuriteInfo.com.BackDoor.Meterpreter.240.27804.8711 SecuriteInfo.com.BackDoor.Meterpreter.240.27939.22786 SecuriteInfo.com.BackDoor.Meterpreter.240.28261639 SecuriteInfo.com.BackDoor.Meterpreter.240.28877.34 SecuriteInfo.com.BackDoor.Meterpreter.240.29009.23213 SecuriteInfo.com.BackDoor.Meterpreter.240.29278688 SecuriteInfo.com.BackDoor.Meterpreter.240.30198.22684 SecuriteInfo.com.BackDoor.Meterpreter.240.30526.12722 SecuriteInfo.com.BackDoor.Meterpreter.240.31074.16490 SecuriteInfo.com.BackDoor.Meterpreter.240.3133.6546 SecuriteInfo.com.BackDoor.Meterpreter.240.31368.3014 SecuriteInfo.com.BackDoor.Meterpreter.240.31534715 SecuriteInfo.com.BackDoor.Meterpreter.240.31784.31130 SecuriteInfo.com.BackDoor.Meterpreter.240.31877.4933 SecuriteInfo.com.BackDoor.Meterpreter.240.31895.8344 SecuriteInfo.com.BackDoor.Meterpreter.240.32563.30735 SecuriteInfo.com.BackDoor.Meterpreter.240.33145467 SecuriteInfo.com.BackDoor.Meterpreter.240.345.2372 SecuriteInfo.com.BackDoor.Meterpreter.240.35761773 SecuriteInfo.com.BackDoor.Meterpreter.240.41228931 SecuriteInfo.com.BackDoor.Meterpreter.240.4265.8425 SecuriteInfo.com.BackDoor.Meterpreter.240.4525.21053 SecuriteInfo.com.BackDoor.Meterpreter.240.4596.23973 SecuriteInfo.com.BackDoor.Meterpreter.240.46525736 SecuriteInfo.com.BackDoor.Meterpreter.240.47293534 SecuriteInfo.com.BackDoor.Meterpreter.240.4735.32705 SecuriteInfo.com.BackDoor.Meterpreter.240.47792214 SecuriteInfo.com.BackDoor.Meterpreter.240.5046.31835 SecuriteInfo.com.BackDoor.Meterpreter.240.5189.8630 SecuriteInfo.com.BackDoor.Meterpreter.240.52969328 SecuriteInfo.com.BackDoor.Meterpreter.240.5389.28329 SecuriteInfo.com.BackDoor.Meterpreter.240.55918933 SecuriteInfo.com.BackDoor.Meterpreter.240.612.12100 SecuriteInfo.com.BackDoor.Meterpreter.240.61797977 SecuriteInfo.com.BackDoor.Meterpreter.240.62197522 SecuriteInfo.com.BackDoor.Meterpreter.240.64356132 SecuriteInfo.com.BackDoor.Meterpreter.240.64892671 SecuriteInfo.com.BackDoor.Meterpreter.240.655.11710 SecuriteInfo.com.BackDoor.Meterpreter.240.65674117 SecuriteInfo.com.BackDoor.Meterpreter.240.65898681 SecuriteInfo.com.BackDoor.Meterpreter.240.66496934 SecuriteInfo.com.BackDoor.Meterpreter.240.68248571 SecuriteInfo.com.BackDoor.Meterpreter.240.7010.23528 SecuriteInfo.com.BackDoor.Meterpreter.240.72939561 SecuriteInfo.com.BackDoor.Meterpreter.240.75187118 SecuriteInfo.com.BackDoor.Meterpreter.240.75235451 SecuriteInfo.com.BackDoor.Meterpreter.240.76113268 SecuriteInfo.com.BackDoor.Meterpreter.240.77912935 SecuriteInfo.com.BackDoor.Meterpreter.240.79697828 SecuriteInfo.com.BackDoor.Meterpreter.240.79721668 SecuriteInfo.com.BackDoor.Meterpreter.240.85768165 SecuriteInfo.com.BackDoor.Meterpreter.240.89418229 SecuriteInfo.com.BackDoor.Meterpreter.240.9025.27749 SecuriteInfo.com.BackDoor.Meterpreter.240.96594577 SecuriteInfo.com.BackDoor.Meterpreter.240.97553962 SecuriteInfo.com.Trojan.PWS.Salat.332.10254.6212 SecuriteInfo.com.Trojan.PWS.Salat.332.10360.17138 SecuriteInfo.com.Trojan.PWS.Salat.332.10911.21987 SecuriteInfo.com.Trojan.PWS.Salat.332.12856.22999 SecuriteInfo.com.Trojan.PWS.Salat.332.13513.20346 SecuriteInfo.com.Trojan.PWS.Salat.332.13605.2115 SecuriteInfo.com.Trojan.PWS.Salat.332.13805.26403 SecuriteInfo.com.Trojan.PWS.Salat.332.13946.31194 SecuriteInfo.com.Trojan.PWS.Salat.332.14520.10285 SecuriteInfo.com.Trojan.PWS.Salat.332.14620.20862 SecuriteInfo.com.Trojan.PWS.Salat.332.16585.22835 SecuriteInfo.com.Trojan.PWS.Salat.332.1718.10259 SecuriteInfo.com.Trojan.PWS.Salat.332.17242.10398 SecuriteInfo.com.Trojan.PWS.Salat.332.17312.2802 SecuriteInfo.com.Trojan.PWS.Salat.332.17754.17552 SecuriteInfo.com.Trojan.PWS.Salat.332.18034.8025 SecuriteInfo.com.Trojan.PWS.Salat.332.18131.20005 SecuriteInfo.com.Trojan.PWS.Salat.332.18141.1642 SecuriteInfo.com.Trojan.PWS.Salat.332.18925763 SecuriteInfo.com.Trojan.PWS.Salat.332.19010.21816 SecuriteInfo.com.Trojan.PWS.Salat.332.19443.1321 SecuriteInfo.com.Trojan.PWS.Salat.332.19670.28606 SecuriteInfo.com.Trojan.PWS.Salat.332.19709.4641 SecuriteInfo.com.Trojan.PWS.Salat.332.1971.1657 SecuriteInfo.com.Trojan.PWS.Salat.332.19719.879 SecuriteInfo.com.Trojan.PWS.Salat.332.20246.32534 SecuriteInfo.com.Trojan.PWS.Salat.332.20647.28033 SecuriteInfo.com.Trojan.PWS.Salat.332.21248.30686 SecuriteInfo.com.Trojan.PWS.Salat.332.2324.19050 SecuriteInfo.com.Trojan.PWS.Salat.332.23549.246 SecuriteInfo.com.Trojan.PWS.Salat.332.23795.30529 SecuriteInfo.com.Trojan.PWS.Salat.332.23968.32433 SecuriteInfo.com.Trojan.PWS.Salat.332.24408.23416 SecuriteInfo.com.Trojan.PWS.Salat.332.25592.1063 SecuriteInfo.com.Trojan.PWS.Salat.332.25592.12500 SecuriteInfo.com.Trojan.PWS.Salat.332.25623.20701 SecuriteInfo.com.Trojan.PWS.Salat.332.26063.6069 SecuriteInfo.com.Trojan.PWS.Salat.332.26325.28028 SecuriteInfo.com.Trojan.PWS.Salat.332.26805.14064 SecuriteInfo.com.Trojan.PWS.Salat.332.27509.29128 SecuriteInfo.com.Trojan.PWS.Salat.332.27812.20564 SecuriteInfo.com.Trojan.PWS.Salat.332.27890.7253 SecuriteInfo.com.Trojan.PWS.Salat.332.27911.18068 SecuriteInfo.com.Trojan.PWS.Salat.332.28302.16170 SecuriteInfo.com.Trojan.PWS.Salat.332.28614.28970 SecuriteInfo.com.Trojan.PWS.Salat.332.29000.26031 SecuriteInfo.com.Trojan.PWS.Salat.332.29276.27011 SecuriteInfo.com.Trojan.PWS.Salat.332.31727.17414 SecuriteInfo.com.Trojan.PWS.Salat.332.32412.31033 SecuriteInfo.com.Trojan.PWS.Salat.332.3775.5077 SecuriteInfo.com.Trojan.PWS.Salat.332.4016.26994 SecuriteInfo.com.Trojan.PWS.Salat.332.4054.20481 SecuriteInfo.com.Trojan.PWS.Salat.332.4641.28448 SecuriteInfo.com.Trojan.PWS.Salat.332.4824.81 SecuriteInfo.com.Trojan.PWS.Salat.332.5078.27568 SecuriteInfo.com.Trojan.PWS.Salat.332.5675.9063 SecuriteInfo.com.Trojan.PWS.Salat.332.6851.3487 SecuriteInfo.com.Trojan.PWS.Salat.332.7229.24797 SecuriteInfo.com.Trojan.PWS.Salat.332.7367.12844 SecuriteInfo.com.Trojan.PWS.Salat.332.7482.28822 SecuriteInfo.com.Trojan.PWS.Salat.332.763.13072 SecuriteInfo.com.Trojan.PWS.Salat.332.8446.14093 SecuriteInfo.com.Trojan.PWS.Salat.332.8583.22157 SecuriteInfo.com.Trojan.PWS.Salat.332.8697.18343 SecuriteInfo.com.Trojan.PWS.Salat.332.8980.20697 SecuriteInfo.com.Trojan.PWS.Salat.332.9025.16842 SecuriteInfo.com.Trojan.PWS.Salat.332.9959.23654 SecuriteInfo.com.Trojan.PWS.Salat.389.23899.18332 SecuriteInfo.com.Trojan.Pws.Sysrater.B.18460.27245 SecuriteInfo.com.Trojan.Pws.Sysrater.B.21758.3938 SecuriteInfo.com.Trojan.Pws.Sysrater.B.27108.7076.19887 SecuriteInfo.com.Trojan.Pws.Sysrater.D.10564.21020.22959 SecuriteInfo.com.Trojan.Pws.Sysrater.D.26654.24715.6952 SecuriteInfo.com.Trojan.Pws.Sysrater.G.32285.17577 SecuriteInfo.com.Trojan.Pws.Sysrater.G.7921.15854 SecuriteInfo.com.Trojan.Pws.Sysrater.J.13759.15450.4978 SecuriteInfo.com.Trojan.Pws.Sysrater.O.25766.28465 SecuriteInfo.com.Trojan.Pws.Sysrater.O.5522.28693.11750 SecuriteInfo.com.Trojan.Pws.Sysrater.P.21117.11813 SecuriteInfo.com.Trojan.Pws.Sysrater.P.231.1328.19373 SecuriteInfo.com.Trojan.Pws.Sysrater.P.31284.7760 SecuriteInfo.com.Trojan.Pws.Sysrater.P.7781.18475 SecuriteInfo.com.Trojan-PWS.Win32.VKont.27227.19521 SecuriteInfo.com.Trojan.Qhost.1387.2679.5797 SecuriteInfo.com.Trojan.Qhost.45412.8847.601 SecuriteInfo.com.Trojan.Qhost.45413.4030.5918 SecuriteInfo.com.Trojan.Qhost.494.30267.25336 SecuriteInfo.com.Trojan.Qhost.498.27497.402 SecuriteInfo.com.Trojan.Qhost.500.21956.8605 SecuriteInfo.com.Trojan.Qhost.69.32171.15691 SecuriteInfo.com.Trojan.Qhost.69.3321.17351 SecuriteInfo.com.Trojan.QHosts.ARD.15343.26793.26315 SecuriteInfo.com.Trojan.Ranapama.APP.29263.21404 ### Signatures removed due to Clamav detection : SecuriteInfo.com.Trojan.PWS.Vidar.106.12482249 ### Signatures removed due to internal optimization : SecuriteInfo.com.HTML.Agent-HA.20187.29188 SecuriteInfo.com.HTML.Framer.3893.6043 SecuriteInfo.com.HTML.Iframe-AZ.5609.4311 SecuriteInfo.com.HTML.Iframe-BH.23990.20508 SecuriteInfo.com.HTML.Iframe-BH.82153957 SecuriteInfo.com.HTML.Iframe-BLR.5011.4697 SecuriteInfo.com.HTML.Mht-AX.15615.20433 SecuriteInfo.com.Iframe.Malware.10998057.13680.12278 SecuriteInfo.com.JS.ADODB-BN.26763833 SecuriteInfo.com.JS.ADODB-BN.28534489 SecuriteInfo.com.JS.ADODB-BN.55443999 SecuriteInfo.com.JS.ADODB-BN.69851567 SecuriteInfo.com.JS.ADODB-BN.84435452 SecuriteInfo.com.JS.ADODB-BN.85636432 SecuriteInfo.com.JS.ADODB-BN.86435967 SecuriteInfo.com.JS.ADODB-BN.95836494 SecuriteInfo.com.JS.Decode-BKU.1810.8909 SecuriteInfo.com.JS.Decode-BKU.46528295 SecuriteInfo.com.JS.Iframe-ABB.3426.12457 SecuriteInfo.com.JS.Iframe-ABB.91979167 SecuriteInfo.com.JS.Redirector-BIW.15129.10059 SecuriteInfo.com.JS.Redirector-BIW.27646.19780 SecuriteInfo.com.Trojan.DownLoad.926.16324.3560 SecuriteInfo.com.Trojan.Iframe.XX.12252.11880 SecuriteInfo.com.Trojan.Iframe.XX.26450.28151 SecuriteInfo.com.Trojan.Script.42453.516.4386 SecuriteInfo.com.Trojan.Script.727176.83647376 SecuriteInfo.com.XPL.Gen.L.90_109.18307.7213 SecuriteInfo.com.XPL.Gen.L.90_109.23216.12112 ### Signatures added : SecuriteInfo.com.DecompressionBomb.65181917 SecuriteInfo.com.Heur.11385.16986 SecuriteInfo.com.Heur.11633.3158 SecuriteInfo.com.Heur.11666.30434 SecuriteInfo.com.Heur.14484.9249 SecuriteInfo.com.Heur.2077.30271 SecuriteInfo.com.Heur.2130.20216 SecuriteInfo.com.Heur.21507.8846 SecuriteInfo.com.Heur.23034.17761 SecuriteInfo.com.Heur.27193.20963 SecuriteInfo.com.Heur.29992.4869 SecuriteInfo.com.Heur.30822.11462 SecuriteInfo.com.Heur.4135.4700 SecuriteInfo.com.Heur.5913.11975 SecuriteInfo.com.Other.Malware-gen.38962759 SecuriteInfo.com.Other.Malware-gen.57353126 SecuriteInfo.com.Trojan.GenericKD.81381565.44658561 SecuriteInfo.com.Trojan.Packed2.51226.15660.10625 SecuriteInfo.com.Trojan.Packed2.51790.23750.16390 SecuriteInfo.com.Win64.MalwareX-gen.28633389 SecuriteInfo.com.Win64.MalwareX-gen.28633389 SecuriteInfo.com.X97M.DownLoader.2343.14340.28134 SecuriteInfo.com.X97M.DownLoader.2343.25991.14926 SecuriteInfo.com.X97M.DownLoader.2343.279.1004 SecuriteInfo.com.ELF.Gafgyt-NI.17497663 SecuriteInfo.com.ELF.Mirai-AJJ.95971587 SecuriteInfo.com.ELF.Mirai-BDU.27389194 SecuriteInfo.com.ELF.Mirai-BDU.49999985 SecuriteInfo.com.ELF.Mirai-BDU.67485197 SecuriteInfo.com.ELF.Mirai-CLD.68983228 SecuriteInfo.com.ELF.Mirai-VT.87169747 SecuriteInfo.com.Linux.BackDoor.Armada.1.20726.23059 SecuriteInfo.com.Linux.Mirai.10710.20199.24033 SecuriteInfo.com.Linux.Mirai.10754.12813.22257 SecuriteInfo.com.Linux.Mirai.10754.27543.12121 SecuriteInfo.com.Linux.Siggen.15057.31951.15170 SecuriteInfo.com.Linux.Siggen.15058.30391.23414 SecuriteInfo.com.Linux.Siggen.15144.15136.29734 SecuriteInfo.com.Linux.Siggen.15146.21537.24865 SecuriteInfo.com.Linux.Siggen.15147.12281.14965 SecuriteInfo.com.Linux.Siggen.15148.10571.581 SecuriteInfo.com.Linux.Siggen.15149.21866.1426 SecuriteInfo.com.Linux.Siggen.15149.28269.19561 SecuriteInfo.com.Linux.Siggen.15150.9570.17939 SecuriteInfo.com.Linux.Siggen.15151.23102.23033 SecuriteInfo.com.Linux.Trojan.Agent.7OA0J8.14992.12308 SecuriteInfo.com.PUA.Tool.Linux.Microsocks.1.16032.13944 SecuriteInfo.com.PUA.Tool.Linux.Microsocks.1.3546.20892 SecuriteInfo.com.Trojan.Inject6.63441.12420.6230 SecuriteInfo.com.Trojan.Inject6.63441.9668.22788 SecuriteInfo.com.Trojan.Linux.Gafgyt.25809.8537 SecuriteInfo.com.Trojan.Linux.Gafgyt.6929.4325 SecuriteInfo.com.Trojan.PWS.Siggen5.35968.83919984 SecuriteInfo.com.Trojan.PWS.Siggen5.35971.44254154 SecuriteInfo.com.Variant.FormBook.891.93176158 SecuriteInfo.com.W64.ABApplication.WJYF-0246.17319.21309 ### Total for each file provided by SecuriteInfo.com : 43278 spam_marketing.ndb 601750 securiteinfo.hdb 3549141 securiteinfoold.hdb 75863 javascript.ndb 105931 securiteinfohtml.hdb 165466 securiteinfoascii.hdb 135281 securiteinfoandroid.hdb 10211 securiteinfopdf.hdb 29474 securiteinfo.mdb 74 securiteinfo0hour.hdb 90 securiteinfo.pdb 24 securiteinfo.wdb 739 securiteinfo-pua-app-and-vulnerabilities.ndb 4717322 total New Sigs: 76 Dropped Sigs: 222