20020216::2::W32/BadTrans@MM::0::44*6563.+4e*6f76.+4f*6374.+53*6570.+41*7567.+4a*756c.+4d*6179.+46656213615361274672690054687500.9d5bfe576564005475656f172f.+3275
20020216::2::W32/Magistr.a@MM::le1024::00.00{3}.(00|01)00{13}400000(40|c0)2e.{5}0000ec[^00](00|01)0000.(00|01)0000.(00|01)0000.(00|01)00{13}400000(c0|c2)
20020216::2::W32/Magistr.b@MM::le1024::00.00{3}.(00|01)00{13}400000(40|c0)2e.{5}0000ed[^00](00|01)0000.(00|01)0000.(00|01)0000.(00|01)00{13}400000(c0|c2)
20020216::2::W32/Klez.gen@MM::0::0d0a2e0d0a00000044415441200d0a0048454c4f2025730d0a0000003e0d0a004d41494c2046524f4d3a203c000000005243505420544f3a3c00000025640000
20020214::0::VBS/Concon.gen::0::con}{WSHShell.RegWrite}{exefile}{WScript.CreateObject}{Sub}{WSHShell}{L_Welcome_MsgBox_Title_Text}{Software}{Welcome}{Set}{L_Welcome_MsgBox_Message_Text}{CLASSES}{Then}{If}{HKEY_LOCAL_MACHINE}{MsgBox}{WScript.Shell}{open}{End}{shell}{vbOKCancel}{Dim}{intDoIt}{WScript.Quit}{vbInformation}{vbCancel}{command
20020214::4::W32/MTX.gen@M::0::536f6674776172652070726f76696465206279205b4d41545269585d205658207465616d
20020209::2::W32/Nimda@MM::0::5c496e7465726661636573000000436f6e636570742056697275732843562920562e\d2c20436f70797269676874284329\d{4}.{10,}4d494d452d56657273696f6e3a20312e30
20020129::2::W32/Myparty.b@MM::0::537ff3ffff756e4d6f6e5475655765645468754672695361744a616e4665624dffb776fb617241707205794a26026c4175675365704f63745b81fafd4e6f764465633f545a1b1c747bb7a9ff696d
20011229::0::W32/CodeBlue.worm::0::WebService}{vList}{item}{vFound}{vSubDan}{Danger}{vNewCount}{FoundString}{FindMapper}{Str1}{Str2}{InStr}{Found}{DelMapper}{Array}{.ida}{.idq}{.printer}{WebService.GetEx}{ScriptMaps}{ReDim}{Preserve}{vNew}{vNewCount-1}{WebService.PutEx}{WebService.SetInfo}{W3SVC}{GetObject}{LocalHost}{Root
20011229::2::W32/Gokar@MM::0::20002d00200023007400650061006d007600690072007500730000002c000c000100500072006f0064007500630074004e0061006d006500000000004b006100720065006e0000002c000a000100460069006c006500560065007200730069006f006e000000000031002e0030003000
20011220::0::VBS/Carnival.gen@MM::0::Prinz_Charles_Are_Die.TXT.vbs}{Prinz_Charles_Are_Die}{Lucky2000.ico}{CLICK}{BLUE}{BOTTLE}{ICON}{DESKTOP}{YOUR}{HARD}{DRIVE}{WILL}{LOST}{VIRUS}{DAMAGE}{COMPUTER}{Prinz}{Charles}{Cool}{Lucky2000}{COOL_NOTEPAD_DEMO.TXT.vbs
20011220::1::W32/CodeRed.c.worm::0::474554202f64656661756c742e6964613f5858585858585858585858585858585858585858585858585858585858585858585858585858585858585858585858
20011220::2::BackDoor.arsd::0::14ff56b936dc5abd1b93ebea5f21b835731bfca6dc6f01248b1485b86c280d3bd1740940b3bb954a1a741572e51a890c8b00cfb7904924fe81c3228da5687ab4
20011219::0::VBS/LoveLetter@MM::0::XXX}{dta1}{dta2}{VBScript}{Run}{male.Recipients.Add}{male}{Russian}{MicroSUXX}{WAB}{MustDie}{FEAR}{MYSTIQUE}{regad}{Please}{malead}{www.sexymafia.ru}{MystiqueCrash}{BEST}{www.erogen.ru}{kindly}{letter}{RUSSIAN}{LaMER}{Best}{www.porno.ru
20011219::0::VBS/Haptime.a@MM::0::SCRIPT}{language}{VBScript}{am}{sorry}{happy}{time}{CreateObject}{Shell.Application}{Help.htm}{Help.vbs}{Help.hta}{help.htm}{Outlook}{HKEY_CURRENT_USER}{Untitled.htm
20011218::2::W32/Navidad.e@M::0::08b56dea4682326762422b165997cbdb401c02d24340a0996520992a9da121a1a11d550519015755328c41c50801760a430f8187b0da183d422828a880acd2e9
20011218::2::W32/Goner@MM::0::70656e7461676f6e65
20011218::3::W32/Aliz@MM::0::69776f726d2e61786c387a65
20011217::4::W32/SirCam@MM::0::5343616d3332
20011217::2::W32/Hybrys.gen@MM::0::485942524953
