Skip to content

Commit

Permalink
Merge pull request antimalware#103 from antimalware/peter-volkov-fals…
Browse files Browse the repository at this point in the history
…e-sig-remove

signature hotfix
  • Loading branch information
peter-volkov committed Dec 23, 2015
2 parents 524ad73 + 9ed51b0 commit e01bde0
Showing 1 changed file with 1 addition and 2 deletions.
3 changes: 1 addition & 2 deletions src/scanner/static/signatures/malware_db.xml
Original file line number Diff line number Diff line change
Expand Up @@ -732,7 +732,6 @@ detailed description:
<signature id="694" format="re" child_id="-1" sever="c" title="JS Virus">loadPNGData\(strFile,</signature>
<signature id="695" format="re" child_id="-1" sever="c" title="JS Virus">\);if\(!~\(['&quot;]{0,1}</signature>
<signature id="696" format="re" child_id="-1" sever="c" title="JS Virus">//\s*Some\.devices\.are</signature>
<signature id="697" format="re" child_id="-1" sever="c" title="JS Virus">stripos\s*\(\s*f_haystack\s*,\s*f_needle\s*,\s*f_offset</signature>
<signature id="698" format="re" child_id="-1" sever="c" title="JS Virus">window\.onerror\s*=\s*killerrors</signature>
<signature id="699" format="re" child_id="-1" sever="c" title="JS Virus">check_user_agent=\[\s*['&quot;]{0,1}Lunascape['&quot;]{0,1}\s*,\s*['&quot;]{0,1}iPhone['&quot;]{0,1}\s*,\s*['&quot;]{0,1}Macintosh</signature>
<signature id="700" format="re" child_id="-1" sever="c" title="JS Virus">document\.write\(['&quot;]{0,1}&lt;['&quot;]{0,1}\+['&quot;]{0,1}i['&quot;]{0,1}\+['&quot;]{0,1}f['&quot;]{0,1}\+['&quot;]{0,1}r['&quot;]{0,1}\+['&quot;]{0,1}a['&quot;]{0,1}\+['&quot;]{0,1}m['&quot;]{0,1}\+['&quot;]{0,1}e</signature>
Expand Down Expand Up @@ -888,4 +887,4 @@ detailed description:
<signature id="850" format="re" child_id="-1" sever="w" title="Suspicious Code">echo\s+['&quot;]{0,1}ok['&quot;]{0,1}</signature>
<signature id="851" format="re" child_id="-1" sever="w" title="Suspicious Code">/usr/sbin/sendmail</signature>
<signature id="852" format="re" child_id="-1" sever="w" title="Suspicious Code">/var/qmail/bin/sendmail</signature>
</database>
</database>

0 comments on commit e01bde0

Please sign in to comment.