SecuriteInfo.com signature update for securiteinfo.hdb (Professional, Gold and Reseller edition) Reference : https://www.securiteinfo.com/clamav-antivirus/published-updates/ ### Generic signatures added/modified : SecuriteInfo.com.HTML-8403 SecuriteInfo.com.Iframe.Gen-125 SecuriteInfo.com.JS.Agent-2710 SecuriteInfo.com.JS.Obfus-1596 SecuriteInfo.com.JS.Obfus-161 SecuriteInfo.com.JS.Obfus-460 SecuriteInfo.com.JS.Obfus-463 SecuriteInfo.com.JS.Obfus-511 SecuriteInfo.com.JS.Obfus-524 SecuriteInfo.com.JS.Obfus-525 SecuriteInfo.com.JS.Obfus-661 SecuriteInfo.com.PHP.Shell-46 SecuriteInfo.com.PUA.JS.Obfus-5 SecuriteInfo.com.VBS.Downloader-2 SecuriteInfo.com.VBS.EmbeddedEXE-4 ### Generic signatures removed due to Clamav detection SecuriteInfo.com.Iframe.Gen-18 SecuriteInfo.com.Iframe.Gen-37 SecuriteInfo.com.JS.Agent-1066 SecuriteInfo.com.JS.Agent-1276 SecuriteInfo.com.JS.Agent-1291 SecuriteInfo.com.JS.Agent-1292 SecuriteInfo.com.JS.Agent-1317 SecuriteInfo.com.JS.Agent-1329 SecuriteInfo.com.JS.Agent-1331 SecuriteInfo.com.JS.Agent-1459 SecuriteInfo.com.JS.Agent-15 SecuriteInfo.com.JS.Agent-1608 SecuriteInfo.com.JS.Agent-1637 SecuriteInfo.com.JS.Agent-2220 SecuriteInfo.com.JS.Agent-2345 SecuriteInfo.com.JS.Agent-252 SecuriteInfo.com.JS.Agent-2657 SecuriteInfo.com.JS.Agent-2752 SecuriteInfo.com.JS.Agent-2756 SecuriteInfo.com.JS.Agent-2812 SecuriteInfo.com.JS.Agent-2814 SecuriteInfo.com.JS.Agent-2893 SecuriteInfo.com.JS.Agent-2921 SecuriteInfo.com.JS.Agent-2950 SecuriteInfo.com.JS.Agent-2961 SecuriteInfo.com.JS.Agent-38 SecuriteInfo.com.JS.Agent-589 SecuriteInfo.com.JS.Agent-591 SecuriteInfo.com.JS.Agent-592 SecuriteInfo.com.JS.Agent-593 SecuriteInfo.com.JS.Agent-599 SecuriteInfo.com.JS.Agent-620 SecuriteInfo.com.JS.Agent-629 SecuriteInfo.com.JS.Agent-630 SecuriteInfo.com.JS.Agent-633 SecuriteInfo.com.JS.Agent-635 SecuriteInfo.com.JS.Agent-641 SecuriteInfo.com.JS.Agent-660 SecuriteInfo.com.JS.Agent-666 SecuriteInfo.com.JS.Agent-669 SecuriteInfo.com.JS.Agent-670 SecuriteInfo.com.JS.Agent-675 SecuriteInfo.com.JS.Agent-676 SecuriteInfo.com.JS.Agent-682 SecuriteInfo.com.JS.Agent-685 SecuriteInfo.com.JS.Agent-688 SecuriteInfo.com.JS.Agent-689 SecuriteInfo.com.JS.Agent-692 SecuriteInfo.com.JS.Agent-706 SecuriteInfo.com.JS.Agent-709 SecuriteInfo.com.JS.Agent-715 SecuriteInfo.com.JS.Agent-721 SecuriteInfo.com.JS.Agent-722 SecuriteInfo.com.JS.Agent-779 SecuriteInfo.com.JS.Agent-793 SecuriteInfo.com.JS.Agent-795 SecuriteInfo.com.JS.Agent-797 SecuriteInfo.com.JS.Agent-800 SecuriteInfo.com.JS.Agent-801 SecuriteInfo.com.JS.Agent-804 SecuriteInfo.com.JS.Agent-805 SecuriteInfo.com.JS.Agent-811 SecuriteInfo.com.JS.Agent-813 SecuriteInfo.com.JS.Agent-876 SecuriteInfo.com.JS.Agent-944 SecuriteInfo.com.JS.Agent-989 SecuriteInfo.com.JS.Blacole-16 SecuriteInfo.com.JS.Blacole.Gen-2 SecuriteInfo.com.JS.Clickjack-16 SecuriteInfo.com.JS.Clickjack-26 SecuriteInfo.com.JS.Downloader-125 SecuriteInfo.com.JS.Downloader-71 SecuriteInfo.com.JS.DownLoader.FakejQuery.4 SecuriteInfo.com.JS.DownLoader.FakejQuery.5 SecuriteInfo.com.JS.EmbeddedEXE-13 SecuriteInfo.com.JS.EmbeddedEXE-14 SecuriteInfo.com.JS.Exploit-33 SecuriteInfo.com.JS.FakeAV-1 SecuriteInfo.com.JS.FakeAV-13 SecuriteInfo.com.JS.FBspam-9 SecuriteInfo.com.JS.Includer.Gen-9 SecuriteInfo.com.JS.Miner-12 SecuriteInfo.com.JS.Miner-20 SecuriteInfo.com.JS.Obfus-1008 SecuriteInfo.com.JS.Obfus-1040 SecuriteInfo.com.JS.Obfus-1051 SecuriteInfo.com.JS.Obfus-1081 SecuriteInfo.com.JS.Obfus-1105 SecuriteInfo.com.JS.Obfus-111 SecuriteInfo.com.JS.Obfus-1127 SecuriteInfo.com.JS.Obfus-114 SecuriteInfo.com.JS.Obfus-1147 SecuriteInfo.com.JS.Obfus-115 SecuriteInfo.com.JS.Obfus-117 SecuriteInfo.com.JS.Obfus-1199 SecuriteInfo.com.JS.Obfus-1202 SecuriteInfo.com.JS.Obfus-1206 SecuriteInfo.com.JS.Obfus-1212 SecuriteInfo.com.JS.Obfus-1244 SecuriteInfo.com.JS.Obfus-1247 ### Generic signatures removed due to internal optimisation ### Signatures removed due to generic signatures : SecuriteInfo.com.Exploit.ADODB.Stream.DD.12210.26649 SecuriteInfo.com.HTML.Framer.25159.13217 SecuriteInfo.com.HTML.Framer.3893.6043 SecuriteInfo.com.Iframe.Malware.10998057.13680.12278 SecuriteInfo.com.JS.Decode-BKU.10803.20475 SecuriteInfo.com.JS.Decode-BKU.15933.25533 SecuriteInfo.com.JS.Decode-BKU.17489.22245 SecuriteInfo.com.JS.Decode-BKU.19324.25335 SecuriteInfo.com.JS.Decode-BKU.21359.13973 SecuriteInfo.com.JS.Decode-BKU.22694.29081 SecuriteInfo.com.JS.Decode-BKU.24045.1376 SecuriteInfo.com.JS.Decode-BKU.245.26353 SecuriteInfo.com.JS.Decode-BKU.25474.14106 SecuriteInfo.com.JS.Decode-BKU.27705.28881 SecuriteInfo.com.JS.Decode-BKU.30208.7229 SecuriteInfo.com.JS.Decode-BKU.5444.31476 SecuriteInfo.com.JS.Decode-BKU.8353.31113 SecuriteInfo.com.JS.Dropper-CF.10878.1725 SecuriteInfo.com.JS.Dropper-CF.14882.22717 SecuriteInfo.com.JS.Dropper-CF.15098.10619 SecuriteInfo.com.JS.Dropper-CF.16989.3084 SecuriteInfo.com.JS.Dropper-CF.18877.7754 SecuriteInfo.com.JS.Dropper-CF.21868.1864 SecuriteInfo.com.JS.Dropper-CF.24318.26419 SecuriteInfo.com.JS.Dropper-CF.26864.28580 SecuriteInfo.com.JS.Dropper-CF.28116.16162 SecuriteInfo.com.JS.Dropper-CF.28770.14270 SecuriteInfo.com.JS.Dropper-CF.6148.17847 SecuriteInfo.com.JS.Dropper-CF.6906.21369 SecuriteInfo.com.JS.Dropper-CF.9927.4072 SecuriteInfo.com.JS.Exploit.1040.15214 SecuriteInfo.com.JS.HiddenLink.A.7786.21591 SecuriteInfo.com.JS.Illredir-BY.10274.4741 SecuriteInfo.com.JS.Illredir-BY.10772.10951 SecuriteInfo.com.JS.Illredir-BY.11863.21157 SecuriteInfo.com.JS.Illredir-BY.11989.13911 SecuriteInfo.com.JS.Illredir-BY.14266.16273 SecuriteInfo.com.JS.Illredir-BY.16919.30296 SecuriteInfo.com.JS.Illredir-BY.18095.20884 SecuriteInfo.com.JS.Illredir-BY.26764.13001 SecuriteInfo.com.JS.Illredir-BY.2772.30599 SecuriteInfo.com.JS.Illredir-BY.32356.32199 SecuriteInfo.com.JS.Illredir-BY.4449.24912 SecuriteInfo.com.JS.Illredir-BY.8161.9582 SecuriteInfo.com.JS.Illredir-BY.9488.14808 SecuriteInfo.com.JS.Redirector.based.3.6994.24385 SecuriteInfo.com.JS.Siggen5.44642.26343.6161 SecuriteInfo.com.JS.Siggen5.44642.4255.23249 SecuriteInfo.com.Mal.Iframe-F.9027.16384 SecuriteInfo.com.PHP.BackDoor.CZ.26251.28702 SecuriteInfo.com.SCRIPT.Virus.28716.23339 SecuriteInfo.com.TR.Dldr.Psyme.BJ.1.9440.16129.9848 SecuriteInfo.com.Trojan.Agent.JS.AV.25075.17155 SecuriteInfo.com.Trojan.Script.42453.516.4386 SecuriteInfo.com.Trojan.Script.62504.12673.25605 SecuriteInfo.com.Trojan.Script.727176.11639.16192 SecuriteInfo.com.Trojan.Script.727176.14785.32738 SecuriteInfo.com.Trojan.Script.727176.1608.6035 SecuriteInfo.com.Trojan.Script.727176.17127.4052 SecuriteInfo.com.Trojan.Script.727176.20772.7884 SecuriteInfo.com.Trojan.Script.727176.22083.4480 SecuriteInfo.com.Trojan.Script.727176.22302.29752 SecuriteInfo.com.Trojan.Script.727176.22403.30932 SecuriteInfo.com.Trojan.Script.727176.24664.29753 SecuriteInfo.com.Trojan.Script.727176.25864.16259 SecuriteInfo.com.Trojan.Script.727176.30895.8457 SecuriteInfo.com.Trojan.Script.727176.5053.19109 SecuriteInfo.com.Trojan.Script.727176.6557.23995 SecuriteInfo.com.VBS.Dropper.13504.21813 SecuriteInfo.com.XPL.Gen.L.90_109.18307.7213 SecuriteInfo.com.XPL.Gen.L.90_109.23216.12112 ### Signatures removed due to Clamav detection : SecuriteInfo.com.Trojan.PWS.Banker.12471.12585.14220 SecuriteInfo.com.Trojan.PWS.Banker.12471.5120.7841 SecuriteInfo.com.Trojan.PWS.Banker.13873.15264.28606 SecuriteInfo.com.Trojan.PWS.Banker.57804.28388.4559 SecuriteInfo.com.Trojan.PWS.Banker.8914.30786.18256 SecuriteInfo.com.Trojan.PWS.DiscordNET.33.30087.5703 SecuriteInfo.com.ELF.Akira-A.13614.6690 SecuriteInfo.com.Linux.Encoder.418.27149.900 SecuriteInfo.com.Trojan.DownLoader47.34652.2561.5130 SecuriteInfo.com.Trojan.DownLoader47.34700.30744.26753 SecuriteInfo.com.Trojan.Encoder.40933.31361.29527 SecuriteInfo.com.Trojan.Packed2.47849.13925.15379 SecuriteInfo.com.Trojan.Packed2.47849.18935.7262 SecuriteInfo.com.Trojan.Packed2.47849.22704.17170 SecuriteInfo.com.Trojan.PWS.RedLineNET.9.18102.26649 SecuriteInfo.com.Variant.Lazy.591139.14493.26029 SecuriteInfo.com.Variant.Lazy.592084.20855.10379 SecuriteInfo.com.Variant.Lazy.592084.32296.21175 SecuriteInfo.com.Variant.Lazy.592084.7701.3621 SecuriteInfo.com.Variant.Ser.Lazy.7836.29723.18435 SecuriteInfo.com.Variant.Ser.Lazy.7955.2729.23428 SecuriteInfo.com.Variant.Ser.Zusy.5202.20589.20973 SecuriteInfo.com.Win32.MalwareX-gen.10702.1715 SecuriteInfo.com.Win32.MalwareX-gen.129.30061 SecuriteInfo.com.Win32.MalwareX-gen.19026.29903 SecuriteInfo.com.Win32.MalwareX-gen.2104.1500 SecuriteInfo.com.Win32.MalwareX-gen.21165.10915 SecuriteInfo.com.Win32.MalwareX-gen.2231.5885 SecuriteInfo.com.Win32.MalwareX-gen.23687.10317 SecuriteInfo.com.Win32.RATX-gen.16017.14780 SecuriteInfo.com.Win32.RATX-gen.3578.12820 SecuriteInfo.com.Win32.RATX-gen.6535.9529 SecuriteInfo.com.Win32.RATX-gen.7479.21659 SecuriteInfo.com.Win64.MalwareX-gen.23705.12609 ### Signatures removed due to internal optimization : ### Signatures added : SecuriteInfo.com.BackDoor.Siggen2.4873.9249.17565 SecuriteInfo.com.Exploit.CVE-2017-11882.123.12187.29198 SecuriteInfo.com.Exploit.CVE-2017-11882.123.15030.28858 SecuriteInfo.com.Exploit.CVE-2017-11882.123.25977.17123 SecuriteInfo.com.Exploit.CVE-2017-11882.123.4528.19655 SecuriteInfo.com.Exploit.CVE-2018-0798.4.27747.3888 SecuriteInfo.com.EXPL_RODIV.A.14074 SecuriteInfo.com.FileRepMalware.10618.28985 SecuriteInfo.com.Heur.11397.14498 SecuriteInfo.com.Heur.15476.19487 SecuriteInfo.com.Heur.25585.782 SecuriteInfo.com.Heur.2803.10558 SecuriteInfo.com.HTML.Iframe-BN.1657.2316 SecuriteInfo.com.MacOS.Poseidon-G.3621.28521 SecuriteInfo.com.Other.Malware-gen.6685.13427 SecuriteInfo.com.Riskware.RemoteAdmin_RemoteUtilities.9640.30018 SecuriteInfo.com.SCRIPT.WORM.Virus.16544.23285 SecuriteInfo.com.Trojan.Downloader.JS.UA.26471.28371 SecuriteInfo.com.Trojan-Downloader.Office.Doc.17916.14393 SecuriteInfo.com.Trojan-Downloader.Office.Doc.31046.31029 SecuriteInfo.com.Trojan-Downloader.Office.Doc.8933.16063 SecuriteInfo.com.Trojan.Iframe.MC.30082.1535 SecuriteInfo.com.Trojan.JS.Iframe.DHK.8499.23625 SecuriteInfo.com.Trojan-PSW.Win32.Lumma.bmf.18507.17307 SecuriteInfo.com.Trojan.Win32.Generic.9143.9434 SecuriteInfo.com.Win32.Evo-gen.14047.7533 SecuriteInfo.com.Win32.Evo-gen.14047.7533 SecuriteInfo.com.Win32.MalwareX-gen.3000.21674 SecuriteInfo.com.HTML.Phishing-AUC.31279.10483 SecuriteInfo.com.Script.SNH-gen.1563.26207 SecuriteInfo.com.Script.SNH-gen.612.31779 ### Total for each file provided by SecuriteInfo.com : 37874 spam_marketing.ndb 218012 securiteinfo.hdb 4145583 securiteinfoold.hdb 53709 javascript.ndb 104082 securiteinfohtml.hdb 152105 securiteinfoascii.hdb 126379 securiteinfoandroid.hdb 10347 securiteinfopdf.hdb 20689 securiteinfo.mdb 79 securiteinfo0hour.hdb 17 securiteinfo.pdb 2 securiteinfo.wdb 4868878 total New Sigs: 46 Dropped Sigs: 205