ClamWin Free Antivirus Forum Index
ClamWin Free Antivirus
Support and Discussion Forums
Reply to topic
Email With Attached File Containing Fake Coronavirus Info
GuitarBob


Joined: 09 Jul 2006
Posts: 4664
Location: USA
Reply with quote
There many fake emails being sent that pretend to contain Coronavirus information in an attached that is usually a Microsoft Office file, but it can be another file type.

Below is an HDB signature for one of the most common emails that Clam AV does not detect. Copy the HDB signature to a Notepad file and save it in the ClamWin db program data folder, or add the signature to an existing HDB file if you already have it there. Do not save the file with a .txt or .text extension on the end of the name. Save the file as Sigfile.hdb. Select file type All Files to prevent the .txt or .text at the end of the filename. ClamWin is unable to recognize a text file as a signature. After saving the file, scan something with ClamWin to make sure the signature works--delete the signature file if it does not.

2fad1abd988472f67c473ddce58d6a59:396597:Win.Trojan.VBAAgent-032020-2102

Regards,
View user's profileSend private message
Lipper


Joined: 31 Oct 2010
Posts: 127
Location: USA
Reply with quote
As always - thank you, Bob. I've added it to my sigfile. Smile
View user's profileSend private message
GuitarBob


Joined: 09 Jul 2006
Posts: 4664
Location: USA
Reply with quote
Thanks Lipper--good to hear from you. Trend Micro has done the most work in spotting malware piggybacking on the Corona Virus, but their samples are proprietary right now.

Stay Safe!

Regards,
View user's profileSend private message
Email With Attached File Containing Fake Coronavirus Info
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT  
Page 1 of 1  

  
  
 Reply to topic