The Perl Toolchain Summit needs more sponsors. If your company depends on Perl, please support this very important event.
20050504::4d5a::W32/Bagle.ai@MM::(ge1024 and le3072) or eq25600::d032c532c232c6d2c002c1.{0,24}d3c28807474975d2e801000000
20050504::4d5a900003::W32/Sober.p@MM::eq8192::0325f6bfc0435c0a2b65696e61686e756e6725d61eb23970170000020430153e
20050504::4d5a::W32/Mytob.gen@MM::eq13312 or (ge24576 and le36864)::79.{3,81}[2a65b045]7243[04a29e1e][ec8ff862]
20050305::4d5a900003::W32/Mydoom.ba@MM::eq5120::6f70656e134d6f7a5f6c615f7051c32f34eb285c0269626c655fa0708429c74243b6fb61534c4fd167fe5b9268747470736572764c617baede75c76223494337
20050305::4d5a900003::W32/Downloader-PH::eq9216::6e74703a2f2f6305c5826a79632e6d2f6130621bd56c692f6910b3a27b6670689e11ba13703f7569643dc581d3c9703d37267669881950313d74727900
20050305::4d5a900003::W32/MyWife.b@MM::eq2048::426c61[63bd].{0,4}6b576f726d
20050305::4d5a::PWS-Banker.k.gen::ge8192 and le15360::62.?61.?6c9f.{0,4}af21.{0,4}3c.{0,5}31726d.{0,5}200d43.?70.?75.?740f6e.{2,6}7b.{2,6}4a252f343e.{0,5}a1.?79.?7024.{0,4}50.{0,4}6f63.?456d.?61.?69.{0,4}6c.72.35.{3,4}65.{1,5}6b.{4,9}0d.{0,4}75.{2}45.{0,4}4c2d6c.?436f.?6e.{1,5}1f.{0,4}d9.{0,5}0d2f.{0,5}6db8.{2,6}446973.{2,3}6c.{1,5}3d.{8,9}47ca.?3c.?0d6e.{1,6}65.{0,4}0a.{0,5}41.?4f53.?54c9.6461.{0,5}51
20050305::4d5a900003::W32/Sober.j@MM::eq3072 or eq8192::50726f6a65.{22,35}43.{13,28}4fad339966cf11b7.{3}d393.{6,7}3b.{3,25}466f726d
20050219::4d5a000000::W32/Mydoom.bb@MM::eq1024::0f4d6170565fc5774f6618101e556e566d11902f62087273b3300c99456e76226fdf52fc7b3c5661fbe662ac1967441a76b15479704c0f53f5bf6c8e6d546979
20041221::4d5a900003::W32/Netsky.z@MM::eq2048::033bb839912333001a2ff978490085242164b88900830bc8282a53140608a121704a4202a52451588c108a43f90471704140680a98a6380a2e145185c104b388
20041221::4d5a000000::W32/Zafi.d@MM::eq10240::48454c4f441d4d4149ecc81e52bc6e5dc3435054
20041122::4d5a900003::W32/Lovgate.af@MM::eq5120::328300029a032a800b1c6db6b236db7371b6d64391b191cdcc8dac8e4c93236b71b1916e36db628de509da13942768ce7f3eaf794276ffbe7bad521e8f35e191
20041122::4d5a900003::W32/Lovgate.q@MM::eq5120::02aa00029a02a8000aa4971b6db62e36dcb8ee36dae46db727236d5c6db771b6db9717249917bf9dfcee0df67fcff8dfdad611dd56ea820be07f02d5e5f402f4
20041106::VBS::VBS/Inor.encoded::0::23407e5e2f77454141413d3d39623a7e7e664023402666623a2c613a5e402340262f394e43787253433a45402340263f2b447e613a5e507b502f446e43442b36
20041106::4d5a900003::W32/Netsky.ab@MM::eq2048::1f64170756af8585db8f0a53c9ffdb11e23f4f784303304c5920b108c90d420804567432e1e58a916c9a40104c24c17f
20041106::4d5a900003::W32/Bagz.f@MM::eq17408::4765744c61324102766550da7616bbae7570130f57956426d010f1df87657373616765426fc473796135be2533322e64
20041030::4d5a900003::Generic PWS.f::eq12288::217376686f73742e657865277b[^7d]{32,}7d534f46
20041018::4d5a900003::W32/Korgo.worm.aa::eq2048::2f299f4f6f906182b546b187125e6fd1c847ec1e5fb35b5a212239ae386bddd2e25d37b7dd204a76c7dc1df4de0ff4d55f205be836fddfaa53498476742558e71729
20041015::4d5a900003::W32/Darby@MM::eq9216::40004c624246feff56423521f01f56423645532e444c4c2a.{11,14}40
20041015::4d5a900003::W32/Netsky.ag@MM::eq1024::416c657669727573210c090208334f2f
20041012::4d5a900003::W32/Mabutu.a@MM::eq2048 or eq4096::52554e44.{0,4}4c4c33322e4558452025732c5f6d61696e524400446c6c526567697374657253.{2,5}76.{0,3}0000646c6c0065786500434c5349445c7b.{34,38}30317d00.{1,3}206d7574.{0,2}3120
20041007::4d5a::W32/Lovgate.x@MM::eq8192::96b46655d6c5a3e2464b4c5452616d93145681aec717a22f0c82ffe8242eb66a
20041006::4d5a900003::W32/Lovgate.r@MM::eq1024::400000c02e7273726300{4}1000{3}20030000020000005e0100{13}400000c02e61737061636b000020000000300300001a000000600100{13}400000c02e6461746100{4}10000000500300{6}7a0100{13}400000c02e6c6966060000000100{4}600300{6}7c0100b3dffdff6c5c0300{5}200000e0
20041006::4d5a900003::W32/Mydoom.o@MM::eq1024::5550583000{5}[a080d07060][0002]00001000{7}[0402]00{14}800000e05550583100{5}[90c06050]000000[b0e0908070][0200]0000[8abc604246]000000[0402]00{14}400000e02e7273726300{4}10000000[40a0f0d0c0][010300]0000[060408]000000[8e4ac06444]00{14}400000c0[000a]
20040918::4d5a900003::MultiDropper-KR::eq2048::00ad01ff606563686f72207770756e3325730664db3ee9610a53146c47160c2170e7676774e1737570c92ef978ea96170a717569740f
20040915::4d5a000001::W32/Bagle.aa@MM::ge10240 and le12288::2d2d204261673920417574684f22323961b76fee2e303402094765726d44792e7d6fff
20040911::4d5a000001::W32/Bagle.dll.dr::eq3072::5c67647166772e657865004d5a900003
20040911::4d5a900003::W32/Lovgate.ai@MM::eq2048::312e393000b6d1a5c90d09080a70862cdf135b4d1b2bdc04005bc90100000004002613ff89333280031a32b2800a24a8dd46aa39ec6d8a8e546db6db6db62a36db6dba8db9
20040817::HTMLJS::JS_IllWill::0::747269676765722e5374617274536f66747761726555706461746528657865706174682c20747269676765722e44454641554c545f4d4f444529
20040817::4d5a::W32/Netsky.p@MM::eq2048 or eq4096::0600420049004e00410052005900010030000000000000006b7d66859415ad1dd694ddc489e6393149adb558f0939732592bd1c0fd168e4e
20040721::4d5a900003::W32/Netsky.ac@MM::eq2048::83007c240801750aff74002404e80a00013059006a0158c20c00558b00ec8b4d0c33c0498300f9087766ff248d8f1610
20040717::4d5a::W32/Bagle.af@MM::eq11264 or eq13312::910400a8605458232323235c606468232323236c707478232323237c808488232323238c909498232323239ca0a4
20040710::4d5a000001::W32/Bagle.dll.gen::eq4096::60e801000000e883c404e801000000e95d81edd9214000e81b020000e8eb08eb02cd20ff24249a66be4746e8010000009a598d952b224000e801000000695866
20040706::HTMLVBS::W32/Bagle.ab@MM!hta::0::2c302c31342c33312c3138362c31342c302c3138302c392c3230352c33332c3138342c312c37362c3230352c33332c38342c3130342c3130352c3131352c3332
20040706::4d5a900003::W32/Lovgate.ac@MM::eq94208::393847022f2776d7f550694f766572c9
20040703::4d5a900003::W32/Netsky.w@MM::eq1024::5550583000{5}d00100001000{7}0200{14}800000e05550583100{5}6000{3}e00100005800{3}0200{14}400000e02e7273726300{4}1000{3}400200000400{3}5a00{14}400000c0312e323400555058210c090209e06efdee9e70b4a84e160200de550000009400
20040628::4d5a::W32/Netsky.c@MM::ge1024 and le5120::ed.{0,13}e8.{0,17}e9.{0,12}ffffff.{0,19}83
20040628::4d5a900003::W32/Netsky.f@MM::eq16384::0e415454610f5243502e204c4f6e3ccc183e234d1f41494c0746524f8a12b1024845ffe51d6dfcd208285c04392a2e50
20040628::4d5a::W32/Magistr.a@MM::eq1024::00{2}..00{13}[^00]0000.2e.{5}0000ec[^0004](00|01)0000..0000.(00|01)0000..00{13}.0000[^00][^2e]
20040619::4d5a000001::W32/Bagle.j@MM::le3072::5550583000{5}[a090e0]00{3}1000{7}0200{14}800000e05550583100{5}[305090]000000[b0f0a0]000000[2848468c]0000000200{14}[804060]00{1,2}[00f0]e0?2e7273726300{3,4}[6e7010]19?000000[e040f030][0001]0000[0c62061a]000000[2a4a488e]00{14}400000[c0f0]312e32[3034]00555058210c0902[0a08]
20040614::4d5a900003::W32/Zafi.b@MM::eq11264::c109f7288072edf83dcb1466a9fa6399e61784070c48454c4f444d3b4149f63d465278dd5d87435054ce5ef415b82b49
20040528::4d5a900003::W32/Mydoom@MM::eq5120 or (ge10240 and le15360) or eq45056::[ee9500952d02][1951]554954[8efa0da783f3].{6,27}41.{6,35}20.{0,55}[543e][4f6f7e]
20040522::4d5a900003::W32/Netsky@MM::eq6144 or (ge14336 and le22528)::[7c4c02]05?[20fc77]463c?52.{0,16}[4faf][574d][3a2b1211adb6].{12,49}54
20040519::4d5a900003::W32/Bobax.worm.c::eq2048::e851500000c35253b659b273f966e41d9807de15a594d01d547bf9346b97448fc6b0b9aa1170b4978cc30b3315a16005518980f525ba89a9fc3d677447ee9119
20040517::4d5a900003::W32/Sober@MM::ge6144 and le9216::2b0c01[9454cc2c].{2,7}6f6b756d.{0,4}656e74
20040505::4d5a900003::W32/Netsky.n@MM::eq1024::0020002e6c7061636b0000006000000010000000340000000400{14}400000c02e6c7061636b00000010000000700000000c0000003800{14}400000c02e6c7061636b00000090010000800000001c0000004400{14}400000c02e72737263000000001000000010020000020000006000{14}400000c02e6c7061636b0000003000000020020000220000006200{14}400000c000
20040428::HTMLVBS::W32/Bagle.aa@MM!hta::0::392c33382c3232312c31392c3233372c37312c3137392c36342c3233372c37312c3137392c36342c3233372c37312c3137392c36342c3233372c37312c313739
20040428::VBS::W32/Bagle.aa@MM!vbs::0::392c33382c3232312c31392c3233372c37312c3137392c36342c3233372c37312c3137392c36342c3233372c37312c3137392c36342c3233372c37312c313739
20040427::4d5a900003::W32/Netsky.x@MM::eq2048::4f549af6d9ef93a02aba535193e592b9c02ba3f41bd36d806991eaec1b3da32802120ac4a22b13237c82bfc70ca42ec1
20040426::4d5a500002::W32/Torvil@MM::eq2048::2043bb2a9911aa8033c6b7bd6a49b24dc9bdc0dc21e9008a4148c042101086e40d920421e886e487a49004568c622d52
20040422::4d5a900003::Exploit-DcomRpc.gen::eq2048::20032b3a991222802b3ef726e13606c24020911058ac145054580a0c05874820840dee409010202a23b62a221bda8b6410648b373f1b51b41ec2a0a2a2a2a222
20040402::4d5a900003::W32/Bagle.u@MM::eq8192::43.{3,4}42dc?0d.{4}48454c4c?4f.{3,4}5253[6cb0]540f4d07?41491f?4c2046[d75e]4f[8209]3a3c.{3}3043505420[c925]4f[5861]0f
20040318::4d5a900003::W32/Bagle.e@MM::eq6144 or eq3072 or eq6144::60e801000000e883c404e801000000e95d81edd9214000e8[0504]020000e8eb08eb02cd20ff24249a66be[3552][5347e1]e801000000
20040311::4d5a900003::Proxy-Cidra::eq22528::85ff8ad9735c04c76f2e636a647261ffcffe6fc547455420687474703a2f2f660420485454502f312e306ca49d10c82f
20040309::4d5a900003::W32/Netsky.j@MM::eq17408::60e8ed100000c3839887502c5804817cdbb6df3834302ca261f9ce6d0c1d1333040086c8eff0c3ef8fca08afdb93ccfa
20040229::4d5a900003::W32/Bagle@MM::eq6144 or eq11264 or eq13312::3135312e.{0,4}3230[3103]?2e?302e33
20040226::4d5a900003::W32/Mimail@MM::ge8192 and le20480::51.{1,3}54.{14,36}41.{1,7}52.{0,4}43.{3,7}4f3a.{2,6}4d41.{0,4}494c
20040130::4d5a500002::W32/Dumaru@MM::ge12288 and le28672::4d41.?494c204652.?4f.3a.3c.{17,26}524350.?5420.4f.{3,4}4441.{3,6}515549.{4,9}59
20040127::HTMLVBS::VBS/Inor::0::313644220a737a42696e617279203d20737a42696e61727920262022323036333631364536453646
20040119::4d5a900003::Downloader-GN::eq2048::00633a5c746dffbffcff702e65786500687474703a2f2f772e617175617269756d2d66697320ab6fff682e72752f707061022e62
20031222::4d5a900003::BackDoor-CAG::eq9216::6d6f76205b77f0b756b8002e706c57b776697275732e9f6b77bf4d6d5d202a2f37526567f8c2a0
20031115::4d5a500002::PWS-Mob.dr::eq53248::512f1d350d00200000007379737472617933322e657865141d51
20031010::4d5a900003::W32/Swen@MM::eq29696 or eq71680::3a2f2f7777322e66.{1,2}2e76.{64,93}454c45.{18,21}4f4b.{1,5}535441.{1,5}50415353
20030909::4d5a500002::W32/Pate.b::eq7168::fdffffff4d41494c2046524f4d3a203c61646d696e4064756d612e676f762e72753e0378dddf205243505420544f
20030902::4d5a900003::W32/Sobig.f@MM::eq29696::45f879002b6b234c796e612e28636ddb936fd6ed68a0
20030902::HTMLVBS::VBS/Haptime.gen@MM::0::52656d204920616d20736f727279212068617070792074696d650d0a4f6e204572726f7220526573756d65204e6578740d0a
20030728::4d5a900003::W32/Yaha.u@MM::eq37888::91d96f2d383835392db962b844144be807ebe9a71525742fad6d777723e135582a8f274d4b29a021fa4d494d452d493acacd5a5aa171aafe2f5a5818ee6d6978
20030701::4d5a500002::W32/Lovelorn@MM::eq70656::6c6f76656c6f726e407961686f6f2e636f6d
20030626::4d5a900003::W32/Sobig.e@MM::eq21504::b8c7648371fed25c06384afc14a39853d91ef9697f575279655840997b36d658063ed3ec24b4b94b35199a053a1a6f
20030620::BAT::BAT/Mumu.worm::0::636f70792053532e626174205c5c25315c61646d696e245c73797374656d3332202f790d0a7374617274202f69202f6d696e202f77616974202f4220707365786563205c5c2531202d75202532202d70202533202d6420636d642e657865202f63206e74736572766963652e626174
20030605::4d5a900003::W32/Bugbear.b@MM::eq1024::555058300000000000e00600001000000000000000040000000000000000000000000000800000e055505831000000000020010000f006000014010000040000000000000000000000000000400000e0555058320000000000100000001008000002000000180100000000000000000000000000400000c00000000000000000
20030602::4d5a900003::W32/Sobig.c@MM::eq50176::347b4d5450b476c211b76370bb70b3266f6f5d72c74b2d3829392d310b5155491086f087541945484c4f242b06e0c2f250617743643ac6fdf72815a7bb0b41555448207f039abd2e47494e27bd4c2046524f4de3b18a1958a3435054c45b3197
20030602::4d5a500002::W32/Ganda@MM::gt2048::044140000a41400010414000164140001c414000244140002a2e6c6e6b002a2e657865002a2e736372002a2e656d6c002a2e2a68746d2a002a2e646278003c736b72617474616861686140686f746d61696c2e636f6d3e
20030420::4d5a900003::BackDoor-ARG.dr::eq25600::952b668ad1bdf0e1488ad19771c5ff7bcae80a486f6f5db686e63ccfcdaee45831465416efc3c1edc4cd52c62ec6d01358
20030520::4d5a900003::W32/Palyh@MM::eq43008::7a494e470e3b4f4d6bbeddfeb24e115236303238082d204761626c65eb70343a50201f
20030516::4d5a900003::BackDoor-AQJ::eq66560::4e65744d656574696e672052656d6f7465204465736b746f702028525043292053686172696e6700736d74702e3136332e636f6d00000000
20030514::4d5a900003::W32/Fizzer.dll::eq2048::e89b03000085c07501c3a10c4800105333db3bc37517680014001068e09304005353ff1528200010a30c4800106a1c6820300010e8270400006a10684030
20030514::4d5a930001::W32/Fizzer.gen@MM::eq162816::db0f84b50000008b3b3bfe73ef52535657518b551883e902668b0431663904390f858c0000008bd9c1f90285c974118b06330783c60483c70485c075034975ef751603cb83e10385c9740d8a068a27464738e075034975f37558595f5e565703f903f183e90483c1048bc283e80478283bc8
20030514::4d5a900003::W32/Fizzer.gen@MM::eq10240::db0f84b50000008b3b3bfe73ef52535657518b551883e902668b0431663904390f858c0000008bd9c1f90285c974118b06330783c60483c70485c075034975ef751603cb83e10385c9740d8a068a27464738e075034975f37558595f5e565703f903f183e90483c1048bc283e80478283bc8
20030426::4d5a900003::W32/Lovgate.g@M::eq102400::9060e93d04000087c3a39f9f8a9f5acfd8e39fa27cca3c6fdee39f225c9be8e39f9f283c9be8e39fae2405a29f9f6624d2d8e39f9f9f9f9f2c24a3e9e39fef9e
20030423::4d5a900003::BackDoor-ARG::eq46080::50e8ce86000083c404c74644000000008bcee8f9f8ffff5ec3909090909090908b4424088b5424045052e831f9ffffc2
20030411::4d5a900003::W32/Oror.aa@MM::eq44032::bdff574f524b2d53455859330f545505a3de3b134b617a61d35e0730e1ef509f7662734b369401683a03
20030408::4d5a900003::W32/Gibe.b@MM::eq2048::436f646564202e2e2e6279204265676269652c20536c6f76616b6961
20030408::4d5a900003::W32/Gibe@MM::eq5120::71323136333039007132313633303900007132313633303900000000f4010000341c40
20030315::VBS::VBS/Fourcourse::0::5365742063\d3d4372656174654f626a6563742822264328\d\d2926224d53436f6d6d4c69622e4d53436f6d6d22264328\d\d2926222922264328\d\d29264328\d\d292622646320\d2c63\d22264328\d\d29264328\d\d292622
20030113::4d5a900003::W32/Sobig@MM::eq5120::719dcc1e2e77aa7a4d28d4a400cde3cde4038d1518b3d27b645132f127c17692ebe0d854260eda1357f33fde09495c0a
20030110::4d5a900003::W32/Lirva.gen@MM::eq2048::9d7e58d8632fb7.ce8c24e825.6c682336940b6e5152.{6,7}0c10e4bf..4168c9ff....39f2aef7d12bf98bf78bd98bfa100e8bcb4fc1e9......a5a1.d203cb83e10395f3a48b57....fcb4ab815266b4........152cce52......88505378c70d0403
20030104::4d5a900003::W32/Yaha.k::eq22528::686f746d61696c5f6861636b2e65786546667269656e64736869702e5f68ffef7363721f776f726c645f6f665f3111616bff61ffb865120e776565741742655f48617070
20021228::4d5a900003::W32/Merkur@MM::eq15360::570069006e00330032002e006d00650072006300750072007900200043006f00640065006400200062007900200049006e0064007500730074007200790020004000200041004e0056005800670072006f00750070
20021112::4d5a900003::W32/Braid@MM::eq12288::427269646500427269646500004272696465
20020902::4d5a900003::W32/Bugbear@MM::eq41984::40032e333b7e6fad926f4154414432358743507d847607474f3a3c277d4d41494cc24be668e8a311270d8bd24dfa48454c4f120f32b52b106f612b1775bbc303
20020928::7f454c46::Linux/Slapper.worm::gt1024::726d202d7266202f746d702f2e627567747261712e633b636174203e202f746d702f2e757562756774726171203c3c205f5f656f665f5f3b0a005f5f656f665f
20020928::4d5a900003::W32/Sachiel.worm::eq41984::4d0061006300680069006e0065006400720061006d006f006e006400610072006b0040006c006100740069006e006d00610069006c002e0063006f006d00
20020912::4d5a500002::W32/Blinkom::eq154624::52615a132f4745445a4143af0c2da5fb3735372031203431340f3cb3f1ffa62f548d434f4c4f4d424941315d
20020912::7f454c46::Linux.Osf.8759::gt1024::3733353031383637202d207838362f6c696e7578206d6f645f7068702076342e302e327263312d76342e302e352072656d6f7465206578706c6f69740a6279206c6f7269616e2e0a
20020912::4d5a900003::W32/ProLin@MM::eq10240::3a005c00760069007200750073005c007600690072005c0063007500720072005c00500072006f006a0065006300740031002e00760062
20020912::d0cf11e0a1b11ae1::W97M/Thus.gen::0::2844806179284e6f7729513190312920413064284d108b126855013329da474d736708426f7850946170707900204269727468646136796360
20020830::4d5a900003::BackDoor-AJH::eq18432::4d61646520627920417869616c69732041582d49636f6e20\d2e\d
20020830::4d5a500002::W32/Stopin.b@MM::eq24576::484f5720544f2053035007bdf66f8df68b494f4c454e43456227a325ecd6697003425249808ca5b75c5847332d3c05d86cd8f65241454c
20020830::4d5a500002::W32/Cecile.dr::eq20480::436563696c6520636f6465642062792053302f42305b696b785d2c206d61646520696e20617373656d626c790068
20020830::4d5a500002::W32/Bika.gen::0::57696e33322e[^20]+20627920426c61636b204a61636b00
20020830::VBS::VBS/Hatred.gen::0::42532e5355504552464c554f55532076\d2e\d20627920476f626c65656e2057617272696f722f2f534d46
20020830::4d5a500002::W32/EnerKaz.worm.a::eq335872::28632920627920456e65726779204765726d616e7920535354404861626c61732e636f6d
20020830::d0cf11e0a1b11ae1::W32/Hokilo.worm::eq7168::4952432d576f726d2e486f6b6f206279204b756173616e61677569
20020722::4d5a500002::W32/Sentral.dr::gt1024::5b53616e617472616c2e\d\d\d\d20627920546865726d6f4269742f496b582c79324b5d
20020722::4d534654::VBS/Funtime::eq1281::2553797374656d526f6f74255c53797374656d33325c66756e74696d65\d\d2e687461
20020722::JS::JS/Germinal::0::4a532e4765726d696e616c2050617220506574694b20\d\d2f\d\d2f\d\d\d\d
20020722::4d5a500002::W32/Idele::gt1024::502d616469632076697275732076657273696f6e20\d2e\d446f78746f72
20020722::4d5a500002::W32/Chiton.ab.dr::gt1024::[^00]000000\w{2,6}202d20726f79206720626976
20020722::4d5a900003::W32/Yaha.gen@MM::ge19456 and le20480::3a2d290021072104[^5a]*5a4f4e45414c41524d.....415650..4c*4f434b444f574e3230
20020722::4d5a::W32/Plex@MM::eq1024::504500004c01.00....00000000.000000e000..0b01..00..0000.000000000000...000010000000..000000..0010000000.0000.000000.000000.00.00706c7872
20020715::4d5a900003::W32/Frethem.fl@MM::ge30720 and le43008::7372633d33[^44]*446369643a57386471777138[^71]*7139314f3133
20020715::4d5a500002::W32/Duni.worm.b::eq205824::7a65726f2e6578657f0732f29706446c44697230184bb58558f8617a61615c27673143563ad777840317f163706c6f5c6b270b7a100f76310aeea21977092e2160864dc15f2f1710082c7b01a22e686f740f866f9c77323e466f6cc096220763360c496f73b4f55f4a27736b794c6162
20020708::d0cf11e0a1b11ae1::W97M/VMPCK.dd::0::43415075742120206279202d2d3d7c7c204e7c6330747c4e207c7c3d2d2d2028632920(286329)?\d\d\d\d
20020708::7f454c46::BSD/Scalper.worm::eq44032::2f7573722f62696e2f75756465636f6465202d70202f746d702f2e757561203e202f746d702f2e613b6b696c6c616c6c202d39202e613b63686d6f64202b78202f746d702f2e613b6b696c6c616c6c202d39202e613b2f746d702f2e612025733b657869743b
20020708::4d5a500002::W32/SirCam@MM::eq106496::558becb9410000006a006a004975f951535657b8d4a84100e8bfb0feffbe10ef410033c05568ddb4410064ff3064892033c055688eb4410064ff306489206a20e8d3b1feff50e8fdb2feff6affe8d6b1feff50e8f8b2feffe8ebfdffff8d4df033d2b8f4b44100e89cb5ffff8b55f0b8fcee4100e8
20020708::HTMLJS::JS/Kak@M::0::4b61676f752d416e74692d4b726f246f66742073617973206e6f7420746f646179
20020708::d0cf11e0a1b11ae1::W97M/Gorum::0::47756f726d28566273292e204d6972632f4f75746c6f6f6b2f5662732e20427920424d2026204f572026204b616c616d6172006c0242406e
20020708::4d5a500002::W32/Gorum.gen@MM::eq3072::427261696e4d7573636c65202b204f6c6457617279202b204b414c414d41520047756f726d
20020625::4d5a900003::W32/Perrun::eq8192::6a7067766972
20020625::49545346::VBS/Chick.e@M::eq5120::4848412056657273696f6e20342e37342e38373032000400240009040000000000000000000001000000000000008077b08682fec101000000000000000002001200ef6cf876ea596ffc6cc47572e22e68746d0006000b00696c6f76656c61757261000500040077696e0007000400517e950f0c000400000000000d0000105423534dda893d
20020625::4d5a900003::W32/Higuy@MM::eq1024::50010000100000c981000000060000000000000000000000000000600000e02e4672616c69270073030000006001000004000000020000000000000000000000000000600000e20000
20020617::d0cf11e0a1b11ae1::X97M/Generic::0::5839374d2e4e6974726f67656e
20020617::4d5a500002::W32/Trilisa.gen@MM::ge78848 and le135168::00686f73742e65786500686f73742e736372
20020603::49545346::VBS/Chick.bc@M::eq5120::16004848412056657273696f6e20342e37332e383139380004002400090400+0100+[^00]+c10100+02001100746f706963732f696e6465782e68746d000300.00\w+2048656c70000600.00\w+00050003005450000c000400000000000d000010542353
20020603::4d5a900003::W32/Navidad.gen@M::eq31744::4e006100760069006400610064002000560065007200730069006f006e002000\d+.+43006f00700079007200690067006800740020002800430029002000\d00\d00\d00\d00
20020603::4d5a500002::W32/Ska@M::eq7168::626567696e2036343420486170707939392e657865.+656e64.+536b61
20020527::4d5a900003::W32/GOP@MM::eq35840::736d74702e796561682e6e65.+2d20474554204f494351
20020527::BAT::JS/SQL.Spida.worm.b::0::[205c]73657276696365732e657865.+[205c].+73716c657865632e6a73.+[205c]636c656d61696c2e657865.+[205c]73716c70726f636573732e6a73.+[205c]73716c696e7374616c6c2e626174.+[205c]73716c6469722e6a73.+72756e2e6a73.+[205c]74696d65722e646c6c.+[205c]73616d64756d702e646c6c.+[205c]707764756d70322e657865
20020527::4d5a500002::W32/Benjamin.worm::eq129024::000000009060e93d040000db95ad0c335aa9b70388ed0c306c8291e38eed0cb00c554577b1a985ae4de04833be2c6a30b1a9cbb682904833b1a90c333c2c0879f5a95ccc
20020520::4d5a900003::W32/Choke.c.worm::eq11264::4900200063006f006d006500200069006e002000700069006500630065002e002000200020004d00790020006e0061006d00650020006900730020004a0065007200720079
20020520::49545346::VBS/Chick.d@M::eq5120::4848412056657273696f6e20\d2e\d\d2e\d\d\d\d.+564220427269746e657920642e68746d6c.+6f636f736f6674
20020520::49545346::VBS/Chick.a@M::eq5120::4848412056657273696f6e20\d2e\d\d2e\d\d\d\d.+427269746e65792e68746d6c.+427269746e65792d506963.+627269746e65792d70696373
20020514::4d5a900003::W32/Zhangpo@MM::eq267264::7a68616e67706f00582d4d61696c6572
20020514::4d5a500002::W32/Haiku@MM::eq2048::4861696b752047656e657261746f72
20020514::VBS::IRC/Theme.worm.dr::0::4952432d576f726d2e\w+20+5468656d6520576f726d20+4279
20020504::4d5a::W32/GriYo.29A.by::0::436f64656420627920477269596f.+323941
#20020427::4d5a::W95/Elkern.cav.c::gt1024::57716b.+3d757365725875.+5c6578706c6f726572
20020427::4d5a900003::W32/MyLife.j@MM::eq2048::ff010600534841524f4e001993420022
20020427::d0cf11e0a1b11ae1::WM/Cap::0::434150.+4175746f45786563.+4175746f4f70656e.+46696c654f70656e.+46696c6553617665.+4175746f436c6f7365.+46696c65536176654173.+546f6f6c734d6163726f
20020422::7f454c46::Linux/Manpage::eq4096::2f746d702f76697275732e63002f746d702f76696374756d
20020422::d0cf11e0a1b11ae1::X97M/Oblivion::0::6b696c6c6572006b0069006c006c00650072
20020419::4d5a500002::W32/Orez::eq3072::5669727573202d204f72655a52617453205b496b785d2028432920\d\d\d\d
20020419::4d5a900003::W32/Hybrys.gen@MM::eq1024::2e7465787400000000.000000100000..000000020000000000000000000000000000200000e02e726461746100000010000000.00005a00000000.0000000000000000000000000000400000c0
20020419::4d5a900003::W32/BadTrans@MM::gt8192 and le20480::44*6563.+4e*6f76.+4f*6374.+53*6570.+41*7567.+4a*756c.+4d*6179.+46656213615361274672690054687500.9d5bfe576564005475656f172f.+3275
20020419::4d5a900003::W32/Nimda.gen@MM::eq37888::5c496e7465726661636573000000436f6e636570742056697275732843562920562e\d2c20436f70797269676874284329\d\d\d\d.{10,}4d494d452d56657273696f6e3a20312e30
20020419::4d5a900003::W32/Choke.gen.worm::eq10240::430068006f006b00650020002c00200043006f0070007900720069006700680074002000ae00200031003800380036
20020417::4d5a500002::W32/Cervivec@MM::eq159744::56746970.+5769747a.+626c6167.+4a6f6b65.+5a617274
20020417::4d5a900003::W32/MyLife.e@MM::eq3072::7a6172793230+.+40656d61696c2e636f6d
20020417::4d5a900003::W32/Shoho.gen@MM::eq22528::570049004e004c003000470030004e002e004500580045
20020417::4d5a500002::W32/Yarner.gen@MM::eq366592::54726f6a616e65722d496e666f
20020417::4d5a500002::W32/Kitro@MM::gt184320::4b494c54524f202a204d534e5748
20020417::4d5a500002::W32/Warga@MM::gt30720 and lt32768::77617267616d65732e657865
20020417::4d5a500002::W32/Fbound.c@MM::le2048::492d576f726d2e4a6170616e697a65
20020417::4d5a900003::IRC/Girls.worm::0::4769726c73005a6970576f726d00007a6970576f726d
20020417::4d5a900003::W32/Gokar@MM::eq14336::47006f0062006f00.+7400650061006d00760069007200750073.+4b006100720065006e
20020417::4d5a900003::W32/Goner@MM::le4096::70656e7461676f6e65
20020417::4d5a900003::W32/Myparty.b@MM::eq21504::537ff3ffff756e4d6f6e5475655765645468754672695361744a616e4665624dffb776fb617241707205794a26026c4175675365704f63745b81fafd4e6f764465633f545a1b1c747bb7a9ff696d
20020417::4d5a000002::W32/Aliz@MM::eq1024::69776f726d2e61786c387a65
20020417::4d5a420002::W32/Gift.b@MM::0::54686973206973206120492d576f726d20636f6465642062792042756d626c656265655c\d+.210a0a47726574696e677a20746f20616c6c20\d+.206d656d62657273203b29
20020417::4d5a420002::W32/Plage.gen@M::0::5468697320697320506c61676520\d{4}20636f6465642062792042756d626c656265652f\d+.2e00506c61676520\d{4}2041637469766174696f6e
20020404::4d5a::W32/Magistr.b@MM::eq1024::00{2}..00{13}[^00]0000.2e.{5}0000ed[^00](00|01)0000..0000.(00|01)0000..00{13}.0000[^00][^2e]
20020413::d0cf11e0a1b11ae1::W97M/Nitrogen.intd::0::5739372e4e6974726f67656e
20020413::VBS::VBS/Madonna::0::4d61646f6e6e61.+4a6164726171756572204b696c6c6572
20020413::4d5a::W32/Ratter.by::0::5b57696e[^5d]+5d206279205261747465722f\d+
20020404::d0cf11e0a1b11ae1::IRC/Stages.worm::0::54686520((6d616c65)|(66656d616c65))20737461676573206f66206c696665
20020404::4d5a::W32/HLL.ow.24590::ge7168 and lt8192::4a544d202d2066726f6d20655b61785d20746f20486f6d6572205468612050696c65
20020403::4d5a::W32/GMetaphase.by@MM::0::5b57696e33322e[^5d]+5d20.+2047696761627974652f4d6574617068617365
20020403::4d5a::W32/Donut.dr::gt1024::4e45542e646f744e45542062792042656e6e792f323941
20020403::d0cf11e0a1b11ae1::W97M/Melissa.a@MM::0::574f52442f4d656c69737361207772697474656e206279204b77796a69626f
20020402::4d5a::W32/Giri.dr::gt1024::57696e33322e47697269676174206973206e6f772061637469766521
20020402::4d5a::W32/Blakan::0::57696e[3233353839]{2}2e\w+2e*\w*20627920\w+.+67656e657261*74696f6e20766972757320
#20020402::4d5a::W95/Rekoj.GR::gt1024::4a6f6b6572\d+
20020402::d0cf11e0a1b11ae1::W97/Thus.gen::0::546875735f\d\d\d
#20020327::4d5a::W32/Borges.cmp::0::57494e33322e424f5247455320564952555320\d+2e\d+20627920496e74\d+682f494b58004d61646520696e2050617261677561792c20536f75746820416d6572696361
20020323::d0cf11e0a1b11ae1::W97/Marker.gen::0::3c2d207468697320697320[\w ]+206d61726b657221
20020323::d0cf11e0a1b11ae1::W97/VMPCK1.gen::0::564d50434b2076\d+2e\d+\w*205b[^5d]+5d
20020322::4d5a::W32/Pilsen.cmp.4096::0::57494e33322e50494c53454e20564952555320627920496e743133682f494b58004d61446520694e205061526147754179
20020322::4d5a::W32/PetTick@MM::le4096::492d576f726d2e467269656e647300436f64656420627920506574694b2028632932303031.+546f206d7920667269656e6473204d61796120616e64204c617572656e74
#20020322::4d5a::W95/Miam.dr::gt2048::57696e33322e4e656f205669727573206279205b5469506961582f5644535d004d69616d20212049206c6f76652050452066696c6573203b29
20020320::4d5a::W32/FunLove.4099::gt2048::7e46756e204c6f76696e67204372696d696e616c7e
20020319::MIXVBS::VBS/LoveLetter@MM::0::73756220737072656164746f656d61696c2829.+64696d20782c612c6374726c697374732c637472656e74726965732c6d616c6561642c622c726567656469742c726567762c7265676164.+726567763d726567656469742e526567526561642822484b45595f43555252454e545f555345525c536f6674776172655c4d6963726f736f66745c5741425c22266129
20020316::4d5a::W32/Alcop.gen@MM::le6144::776f726d4977696e67.+57696e33322e20496d656c646120746865205642205669727573
20020316::4d5a::W32/Sintesys@MM::gt102400 and le160000::492d576f726d2e53757065724e6f7661
#20020311::4d5a::W32/Enviar.gen@M::0::76656e636520656d20.+7465737465406965672e636f6d2e6272.+696d6572
20020311::4d5a::HLLP.Yap.8421::0::59617021205768617420636f756c642069742042203fa8204974277320592e412e502e202859657420416e6f7468657220506172617369746529
20020309::VBS::VBS/Kristen.A@MM::0::46756e6374696f6e.+466f722049203d203120546f204c656e28[^29]+2920537465702032.+486176652066756e2077697468204b72697374656e
20020309::4d5a::W32/Joss.919::0::5b57696e326b2e4a6f73735d206279205261747465722f\d\d41
20020309::4d5a::W32/Heidi@MM::0::76697275736573.+6578706c6f6974.+706174636820686173206265656e20737570706c6965642077697468207468697320656d61696c20616e642077696c6c206669782074686520736563757269747920686f6c65.+70617463682e657865
20020309::4d5a::W32/Awfull::0::5b57696e33322e4f72616e67652062792045626f6c615d0044656469636174656420746f20746865204e59464420616e64204e5950442e
#20020309::4d5a::W32/Javel.512::0::4b52454154495649545920464f52204b415453
20020305::4d5a::MultiDropper-BN::0::687474703a2f2f7777702e6963712e636f6d2f736372697074732f5757504d73672e646c6c3f66726f6d3d\w+2666726f6d656d61696c3d\w+40\w+2e\w+267375626a6563743d50726f6772616d2b657865637574696f6e26626f64793d5468652b706572736f6e2b746861742b73656e742b746869732b70616765722c2b69732b776974682b612b66696c652b67656e6572617465642b62792b4a756e7461646f7226746f3d\d{6,}2673656e643d.+
#20020305::e9::ARCV.Anna.742::0::5b414e4e415d00536c6172746962617274666173742c2041524356204e754b4520746865204672656e6368.+286329204152635620\d\d\d\d202d20456e676c616e64205261696e696e6720416761696e
20020304::VBS::VBS/SST@MM::0::43687228[^29]+29.+4e657874.+456e64.+46756e6374696f6e.+566273776720\d+2e\d+2e?205b4b5d416c616d6172
20020304::VBS::VBS/Eraser.A::0::457261736546696c6573.+46756e6374696f6e.+46696c65546f4572617365.+46696c65546f45726173652e70617468.+457874656e73696f6e.+545854.+444f43
20020304::BAT::BAT/Double_At.B::0::6563686f202e42415420766972757320274040272076\d+2e\d+.+4f522043582c4358.+4a5a20313042.+4d4f562044582c313043.+4d4f562041482c3431.+494e54203231.+494e542033.+4442.+66696e64.+6465627567.+6578697374.+636f7079.+66696e64.+646f2063616c6c.+64656c
20020304::VBS::VBS/Concon.gen::0::5753485368656c6c.+575363726970742e5368656c6c.+484b45595f4c4f43414c5f4d414348494e45.+65786566696c65.+5c636f6e5c636f6e.+57656c636f6d65.+696e74446f4974.+766243616e63656c.+575363726970742e51756974
20020304::VBS::VBS/CoolNote.worm::0::5072696e7a20436861726c65732041726520446965.+546865206e6577657374204d65737361676520666f7220436f6f6c2055736572.+766263726c66.+4c75636b7932303030.+434f4f4c5f4e4f54455041445f44454d4f2e545854.766273
20020304::VBS::W32/CodeBlue.worm::0::576562536572766963652c764c6973742c6974656d2c76466f756e642c7653756244616e2c44616e6765722c764e6577436f756e742c466f756e64537472696e67.+46756e6374696f6e2046696e644d6170706572.+466f756e64.+53747231.+436872.+44656c4d6170706572.+44616e676572.+4172726179.+5363726970744d617073
20020302::4d5a::Win32.Asorl::0::57696e33322f417374726f4769726c20417374726f436f64656420627920612057617a657800596f75722073797374656d20697320696e6665637465642062792057696e33322f417374726f4769726c2076\d+2e\d+.+44656469636174656420746f20416e69746120616e64206f75722070656e672d6775696e203b290d
20020207::d0cf11e0a1b11ae1::W97M/Generic::0::57.*4d2e537069726f68657461
20020207::4d5a::W32/Adebar.dr::0::5b694b785d20286329203139393920616c6c207269676874207265736572766564202d2070726573656e7420416c6465426172616e
#20020227::4d5a::W32/HLLP.32767.a::0::57696e33322e484c4c502e5a617573686b612e576f726d005a617573686b6100
20020225::4d5a::W32/XTC@MM::0::2e415658656e6372
#20020223::4d5a::W95/Puma::0::eb5a46696e64466972737446696c65410046696e644e65787446696c65410043726561746546696c6541005f6c636c6f73650053657446696c65506f696e746572005265616446696c6500577269746546696c65000b2a2e45584500
20020223::d0cf11e0a1b11ae1::W97M/Hope.gen::0::576f7264323030302e476172476c65
#20020221::e9::Ginger.mp::0::596f752063616e2774206361746368207468652047696e6765726272656164204d616e212195
20020220::474554::W32/CodeRed.c.worm::0::.+436f64655265644949.+
20020220::474554::W32/CodeRed.a.worm::0::484f53543a7777772e776f726d2e636f6d0a204163636570743a202a2f2a0a436f6e74656e742d6c656e6774683a
20020216::4d5a::W32/Klez.gen@MM::0::0d0a2e0d0a00000044415441200d0a0048454c4f2025730d0a0000003e0d0a004d41494c2046524f4d3a203c000000005243505420544f3a3c00000025640000
20020214::4d5a::W32/MTX.gen@M::0::536f6674776172652070726f76696465206279205b4d41545269585d205658207465616d
20011220::4d5a::BackDoor.arsd::0::14ff56b936dc5abd1b93ebea5f21b835731bfca6dc6f01248b1485b86c280d3bd1740940b3bb954a1a741572e51a890c8b00cfb7904924fe81c3228da5687ab4
20011218::4d5a::W32/Navidad.e@M::0::08b56dea4682326762422b165997cbdb401c02d24340a0996520992a9da121a1a11d550519015755328c41c50801760a430f8187b0da183d422828a880acd2e9
20020304::TEST::EICAR-Test-File::0::58354f2150254041505b345c505a58353428505e2937434329377d2445494341522d5354414e444152442d414e544956495255532d544553542d46494c452124482b482a