Re: [clamav-users] petya signature?

2017-06-28 Thread Dmitry Melekhov
28.06.2017 17:23, Alain Zidouemba пишет: This went out yesterday to address the latest variant: Win.Ransomware.Agent-6331177-0 Unfortunately, virus samples from here https://gist.github.com/vulnersCom/65fe44d27d29d7a5de4c176baba45759 аre not detected : clamscan 027cc450ef5f8c5f653329641ec

Re: [clamav-users] petya signature?

2017-06-28 Thread Alain Zidouemba
This went out yesterday to address the latest variant: Win.Ransomware.Agent-6331177-0 Additionally, there are over 70 signatures that contain the keyword "Petya" in their name. Alain On Wed, Jun 28, 2017 at 2:51 AM, Dmitry Melekhov wrote: > Hello! > > Looks like there is no signature for pe

Re: [clamav-users] temporary directories left in /var/lib/clamav

2017-06-28 Thread David Pullman
We've updated the cron script to capture the result code and finding that where we are getting the failures, it's consistently 137. I would guess this is an OOM situation, but does anyone know if there are other reasons we might be getting a 137 from a freshclam run? Thanks! David On Wed, Jun 21

Re: [clamav-users] petya signature?

2017-06-28 Thread Arnaud Jacques
Hello, Looks like there is no signature for petya yet. May be somebody have some? I have published a generic signature from the javascript infector I had. https://www.securiteinfo.com/services/anti-spam-anti-virus/improve-detection-rate-of-zero-day-malwares-for-clamav.shtml -- Cordialement,

Re: [clamav-users] petya signature?

2017-06-28 Thread Dmitry Melekhov
28.06.2017 10:54, Al Varnell пишет: Here are the hash values currently being tracked: Thank you! -Al- ClamXAV User On Tue, Jun 27, 2017 at 11:51 PM, Dmitry Melekhov wrote: Hello! Looks like there is no signature for petya yet.