26 lines
No EOL
769 B
Text
26 lines
No EOL
769 B
Text
rule SearchSuiteSample
|
|
{
|
|
meta:
|
|
Description = "Adware.SearchSuite.vb"
|
|
ThreatLevel = "5"
|
|
|
|
strings:
|
|
//$ = "SearchSuite" ascii wide
|
|
$ = "searchcore.net" ascii wide
|
|
$ = "searchnu.com" ascii wide
|
|
$ = "searchqu.com" ascii wide
|
|
$ = "searchsheet.com" ascii wide
|
|
$ = "adoresearch.com" ascii wide
|
|
$ = "newsearchtab.com" ascii wide
|
|
$ = "searchsupreme.com" ascii wide
|
|
$ = "mlsearch.com" ascii wide
|
|
$ = "insertsearch.com" ascii wide
|
|
$ = "gotsearch.com" ascii wide
|
|
$ = "search.ask.com" ascii wide
|
|
$ = "search-results.com" ascii wide
|
|
$ = "default-search.net" ascii wide
|
|
$ = "imesh web search" ascii wide
|
|
|
|
condition:
|
|
any of them
|
|
} |