GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Wed Jan 23, 2019 5:09 pm |
|
 |
 |
 |
 |
There is a brand new ransomware called Anatova that has been seen worldwide, but especially in USA, Belgium, Germany, and France. It may be the first of a new breed, as it has some new funcitons, including the ability for the authors to use it for other malware besides ransomware if so desired.
Below is a MDB signature for this malware. Copy the signature to a Notepad file and save it in the ClamWin db program data folder. When you save the file, do not save it with a .txt or .text on the end. Just save it as Sigfile.mdb (select type All Files to prevent the .txt or .text at the end of the filename), otherwise ClamWin will not recognize it as a signature. The MDB signatures are for important parts of a malware and will last until the next version of the malware comes out--usually in a couple of weeks, but some malware authors may reuse the same part again., so they might last for a month or so.
280576:3243b0fb8a7d172950a2a6713282e0fd:Win.Trojan.Anatova.012919-1054
Regards,
|
|