GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Sun Feb 02, 2020 6:54 pm |
|
 |
 |
 |
 |
Below is an MDB signature for a new RAT that is a good example of the newer malware which has become affiliated with crack sites, torrent sites, and bundled software that also install malware in addition to what you think it does. This one is a remote access trojan that is brand new, and it gives complete access to your computer.
Copy the MDB signature(s) to a Notepad file and save it in the ClamWin db program data folder, or add the signature(s) to an existing MDB file you already have there. Do not save the file(s) with a .txt or .text extension on the end of the name. Save the file(s) as Sigfile.mdb. Select file type All Files to prevent the .txt or .text at the end of the filename. ClamWin is unable to recognize a text file as a signature. Be sure to scan sometjhing with ClamWin after saving the signature to make sure it works okay--delete it if it does not.
Signatures may last from one week to a couple of weeks depending upon how lazy the malware authors are about changing their version. MDB signatures may last longer--maybe up to a month.
1238528:a93b1d22f40ca5c191b1d8b72d2312c5:Win.Trojan.ShadowTechRat-020220-1244
Regards,
|
|