/usr/local/poudriere/data/packages/e24a8cae34360705d022f17584bb6b4507b8eb89-build1/All/p5-File-Scan-1.43_1.txz vs.
/usr/local/poudriere/data/packages/e24a8cae34360705d022f17584bb6b4507b8eb89-build2/All/p5-File-Scan-1.43_1.txz
p5-File-Scan-1.43_1.txz-content
+MANIFEST
Offset 1, 1 lines modifiedOffset 1, 1 lines modified
1 {"name":​"p5-​File-​Scan",​"origin":​"security/​p5-​File-​Scan",​"version":​"1.​43_1",​"comment":​"Perl5·​anti-​virus·​file·​scanning·​package",​"maintainer":​"jims@bluenotch.​com",​"www":​"UNKNOWN",​"abi":​"FreeBSD:​11:​amd64",​"arch":​"freebsd:​11:​x86:​64",​"prefix":​"/​usr/​local",​"flatsize":​122916,​"licenselogic":​"single",​"desc":​"File:​:​Scan·​allows·​users·​to·​make·​multiplatform·​virus·​scans·​which\ncan·​detect·​Windows/​DOS/​Mac·​viruses.​\n\nIt·​includes·​a·​virus·​scanner·​and·​a·​signature·​database.​",​"deps":​{"perl5":​{"origin":​"lang/​perl5.​20",​"version":​"5.​20.​3_13"}},​"categories":​["security",​"perl5"],​"options":​{"DOCS":​"on",​"EXAMPLES":​"on"},​"files":​{"/​usr/​local/​lib/​perl5/​site_perl/​File/​Scan.​pm":​"1$12d1bbbeb248f7a267​78c9ceb648934fba496bc​2110b2f234c0d491d0feb​8fe0",​"/​usr/​local/​lib/​perl5/​site_perl/​man/​man3/​File:​:​Scan.​3.​gz":​"1$4faffb3c82a990fccd​55d5488f0e2e1baeba473​0cc0e05a2919c82d9b605​94ae",​"/​usr/​local/​lib/​perl5/​site_perl/​mach/​5.​20/​auto/​File/​Scan/​.​packlist":​"1$30992e1e799ffb6c0b​d8582d3e9a46e9559f383​f8012ffb8947c5c02fb3b​35e3",​"/​usr/​local/​share/​doc/​File-​Scan/​Chang·​✂1 {"name":​"p5-​File-​Scan",​"origin":​"security/​p5-​File-​Scan",​"version":​"1.​43_1",​"comment":​"Perl5·​anti-​virus·​file·​scanning·​package",​"maintainer":​"jims@bluenotch.​com",​"www":​"UNKNOWN",​"abi":​"FreeBSD:​11:​amd64",​"arch":​"freebsd:​11:​x86:​64",​"prefix":​"/​usr/​local",​"flatsize":​122916,​"licenselogic":​"single",​"desc":​"File:​:​Scan·​allows·​users·​to·​make·​multiplatform·​virus·​scans·​which\ncan·​detect·​Windows/​DOS/​Mac·​viruses.​\n\nIt·​includes·​a·​virus·​scanner·​and·​a·​signature·​database.​",​"deps":​{"perl5":​{"origin":​"lang/​perl5.​20",​"version":​"5.​20.​3_13"}},​"categories":​["security",​"perl5"],​"options":​{"DOCS":​"on",​"EXAMPLES":​"on"},​"files":​{"/​usr/​local/​lib/​perl5/​site_perl/​File/​Scan.​pm":​"1$ef5805399b84228027​73033d6026a2b059194e2​9455c7a727e616787a9d1​5363",​"/​usr/​local/​lib/​perl5/​site_perl/​man/​man3/​File:​:​Scan.​3.​gz":​"1$c0819492fe720098b2​cd2e49945898b1850e549​54935cdd17a1c52b2c7fb​ad0a",​"/​usr/​local/​lib/​perl5/​site_perl/​mach/​5.​20/​auto/​File/​Scan/​.​packlist":​"1$30992e1e799ffb6c0b​d8582d3e9a46e9559f383​f8012ffb8947c5c02fb3b​35e3",​"/​usr/​local/​share/​doc/​File-​Scan/​Chang·​✂
/usr/local/lib/perl5/site_perl/File/Scan.pm
Offset 133, 32 lines modifiedOffset 133, 32 lines modified
133 sub·​skipped·​{·​$SKIPPED;​·​}133 sub·​skipped·​{·​$SKIPPED;​·​}
134 sub·​suspicious·​{·​$SUSPICIOUS;​·​}134 sub·​suspicious·​{·​$SUSPICIOUS;​·​}
135 sub·​callback·​{·​$CALLBACK;​·​}135 sub·​callback·​{·​$CALLBACK;​·​}
  
136 1;​136 1;​
  
137 __DATA__137 __DATA__
138 #·​generated·​in:​·​2016/​06/​10·​09:​06:​33138 #·​generated·​in:​·​2016/​06/​12·​00:​16:​31
  
139 sub·​get_app_sign·​{139 sub·​get_app_sign·​{
140 »       ​$_·​=·​pop;​140 »       ​$_·​=·​pop;​
141 »       ​/​^\x49\x54\x53\x46/​o·​and·​return($_[0]·​=·​1)​;​141 »       ​/​^\x47\x45\x54/​o·​and·​return($_[0]·​=·​1)​;​
142 »       ​/​^\x47\x45\x54/​o·​and·​return($_[0]·​=·​2)​;​142 »       ​/​^\x4d\x53\x46\x54/​o·​and·​return($_[0]·​=·​2)​;​
143 »       ​/​^\x4d\x5a/​o·​and·​$_[0]·​=·​3;​143 »       ​/​^\xd0\xcf\x11\xe0\xa1​\xb1\x1a\xe1/​o·​and·​return($_[0]·​=·​3)​;​
 144 »       ​/​^\x49\x54\x53\x46/​o·​and·​return($_[0]·​=·​4)​;​
 145 »       ​/​^\x7f\x45\x4c\x46/​o·​and·​return($_[0]·​=·​5)​;​
 146 »       ​/​^\xe9/​o·​and·​return($_[0]·​=·​6)​;​
 147 »       ​/​^\x4d\x5a/​o·​and·​$_[0]·​=·​7;​
144 »       ​/​^\x4d\x5a\x00\x00\x00​/​o·​and·​return($_[1]·​=·​1)​;​148 »       ​/​^\x4d\x5a\x00\x00\x00​/​o·​and·​return($_[1]·​=·​1)​;​
145 »       ​/​^\x4d\x5a\x00\x00\x01​/​o·​and·​return($_[1]·​=·​2)​;​149 »       ​/​^\x4d\x5a\x00\x00\x01​/​o·​and·​return($_[1]·​=·​2)​;​
146 »       ​/​^\x4d\x5a\x00\x00\x02​/​o·​and·​return($_[1]·​=·​3)​;​150 »       ​/​^\x4d\x5a\x00\x00\x02​/​o·​and·​return($_[1]·​=·​3)​;​
147 »       ​/​^\x4d\x5a\x42\x00\x02​/​o·​and·​return($_[1]·​=·​4)​;​151 »       ​/​^\x4d\x5a\x42\x00\x02​/​o·​and·​return($_[1]·​=·​4)​;​
148 »       ​/​^\x4d\x5a\x50\x00\x02​/​o·​and·​return($_[1]·​=·​5)​;​152 »       ​/​^\x4d\x5a\x50\x00\x02​/​o·​and·​return($_[1]·​=·​5)​;​
149 »       ​/​^\x4d\x5a\x90\x00\x03​/​o·​and·​return($_[1]·​=·​6)​;​153 »       ​/​^\x4d\x5a\x90\x00\x03​/​o·​and·​return($_[1]·​=·​6)​;​
150 »       ​/​^\x4d\x5a\x93\x00\x01​/​o·​and·​return($_[1]·​=·​7)​;​154 »       ​/​^\x4d\x5a\x93\x00\x01​/​o·​and·​return($_[1]·​=·​7)​;​
151 »       ​/​^\x7f\x45\x4c\x46/​o·​and·​return($_[0]·​=·​4)​;​ 
152 »       ​/​^\xe9/​o·​and·​return($_[0]·​=·​5)​;​ 
153 »       ​/​^\xd0\xcf\x11\xe0\xa1​\xb1\x1a\xe1/​o·​and·​return($_[0]·​=·​6)​;​ 
154 »       ​/​^\x4d\x53\x46\x54/​o·​and·​return($_[0]·​=·​7)​;​ 
155 »       ​return(0)​;​155 »       ​return(0)​;​
156 }156 }
  
157 sub·​exception·​{157 sub·​exception·​{
158 »       ​$_·​=·​shift;​158 »       ​$_·​=·​shift;​
159 »       ​return(/​^%PDF-​/​o·​?·​1·​:​·​0)​;​159 »       ​return(/​^%PDF-​/​o·​?·​1·​:​·​0)​;​
160 }160 }
Offset 187, 44 lines modifiedOffset 187, 44 lines modified
187 »       ​»       ​»       ​TEST:​·​{187 »       ​»       ​»       ​TEST:​·​{
188 »       ​»       ​»       ​»       ​local·​$_·​=·​lc($save)​;​188 »       ​»       ​»       ​»       ​local·​$_·​=·​lc($save)​;​
189 »       ​»       ​»       ​»       ​/​<·​*script[^>]+language·​*=["'·​]*vbscript["']*[^>]*>​/​os·​and·​$script·​=·​"HTMLVBS",​·​last·​TEST;​189 »       ​»       ​»       ​»       ​/​<·​*script[^>]+language·​*=["'·​]*vbscript["']*[^>]*>​/​os·​and·​$script·​=·​"HTMLVBS",​·​last·​TEST;​
190 »       ​»       ​»       ​»       ​/​<·​*script[^>]*(language​·​*=["'·​]*javascript["']*)​*[^>]*>/​os·​and·​$script·​=·​"HTMLJS",​·​last·​TEST;​190 »       ​»       ​»       ​»       ​/​<·​*script[^>]*(language​·​*=["'·​]*javascript["']*)​*[^>]*>/​os·​and·​$script·​=·​"HTMLJS",​·​last·​TEST;​
191 »       ​»       ​»       ​}191 »       ​»       ​»       ​}
192 »       ​»       ​}192 »       ​»       ​}
193 »       ​»       ​if($script)​·​{193 »       ​»       ​if($script)​·​{
194 »       ​»       ​»       ​if($script·​eq·​"HTMLVBS")​·​{ 
195 »       ​»       ​»       ​»       ​/​\x39\x2c\x33\x38\x2c\​x32\x32\x31\x2c\x31\x​39\x2c\x32\x33\x37\x2​c\x37\x31\x2c\x31\x37​\x39\x2c\x36\x34\x2c\​x32\x33\x37\x2c\x37\x​31\x2c\x31\x37\x39\x2​c\x36\x34\x2c\x32\x33​\x37\x2c\x37\x31\x2c\​x31\x37\x39\x2c\x36\x​34\x2c\x32\x33\x37\x2​c\x37\x31\x2c\x31\x37​\x39/​s·​and·​$virus·​=·​"W32/​Bagle.​aa\@MM!hta",​·​last·​LINE;​ 
196 »       ​»       ​»       ​»       ​/​\x2c\x30\x2c\x31\x34\​x2c\x33\x31\x2c\x31\x​38\x36\x2c\x31\x34\x2​c\x30\x2c\x31\x38\x30​\x2c\x39\x2c\x32\x30\​x35\x2c\x33\x33\x2c\x​31\x38\x34\x2c\x31\x2​c\x37\x36\x2c\x32\x30​\x35\x2c\x33\x33\x2c\​x38\x34\x2c\x31\x30\x​34\x2c\x31\x30\x35\x2​c\x31\x31\x35\x2c\x33​\x32/​s·​and·​$virus·​=·​"W32/​Bagle.​ab\@MM!hta",​·​last·​LINE;​ 
197 »       ​»       ​»       ​»       ​/​\x52\x65\x6d\x20\x49\​x20\x61\x6d\x20\x73\x​6f\x72\x72\x79\x21\x2​0\x68\x61\x70\x70\x79​\x20\x74\x69\x6d\x65\​x0d\x0a\x4f\x6e\x20\x​45\x72\x72\x6f\x72\x2​0\x52\x65\x73\x75\x6d​\x65\x20\x4e\x65\x78\​x74\x0d\x0a/​s·​and·​$virus·​=·​"VBS/​Haptime.​gen\@MM",​·​last·​LINE;​ 
198 »       ​»       ​»       ​»       ​/​\x31\x36\x44\x22\x0a\​x73\x7a\x42\x69\x6e\x​61\x72\x79\x20\x3d\x2​0\x73\x7a\x42\x69\x6e​\x61\x72\x79\x20\x26\​x20\x22\x32\x30\x36\x​33\x36\x31\x36\x45\x3​6\x45\x36\x46/​s·​and·​$virus·​=·​"VBS/​Inor",​·​last·​LINE;​ 
199 »       ​»       ​»       ​} 
200 »       ​»       ​»       ​if($script·​eq·​"HTMLJS")​·​{194 »       ​»       ​»       ​if($script·​eq·​"HTMLJS")​·​{
201 »       ​»       ​»       ​»       ​/​\x74\x72\x69\x67\x67\​x65\x72\x2e\x53\x74\x​61\x72\x74\x53\x6f\x6​6\x74\x77\x61\x72\x65​\x55\x70\x64\x61\x74\​x65\x28\x65\x78\x65\x​70\x61\x74\x68\x2c\x2​0\x74\x72\x69\x67\x67​\x65\x72\x2e\x44\x45\​x46\x41\x55\x4c\x54\x​5f\x4d\x4f\x44\x45\x2​9/​s·​and·​$virus·​=·​"JS_IllWill",​·​last·​LINE;​195 »       ​»       ​»       ​»       ​/​\x74\x72\x69\x67\x67\​x65\x72\x2e\x53\x74\x​61\x72\x74\x53\x6f\x6​6\x74\x77\x61\x72\x65​\x55\x70\x64\x61\x74\​x65\x28\x65\x78\x65\x​70\x61\x74\x68\x2c\x2​0\x74\x72\x69\x67\x67​\x65\x72\x2e\x44\x45\​x46\x41\x55\x4c\x54\x​5f\x4d\x4f\x44\x45\x2​9/​s·​and·​$virus·​=·​"JS_IllWill",​·​last·​LINE;​
202 »       ​»       ​»       ​»       ​/​\x4b\x61\x67\x6f\x75\​x2d\x41\x6e\x74\x69\x​2d\x4b\x72\x6f\x24\x6​f\x66\x74\x20\x73\x61​\x79\x73\x20\x6e\x6f\​x74\x20\x74\x6f\x64\x​61\x79/​s·​and·​$virus·​=·​"JS/​Kak\@M",​·​last·​LINE;​196 »       ​»       ​»       ​»       ​/​\x4b\x61\x67\x6f\x75\​x2d\x41\x6e\x74\x69\x​2d\x4b\x72\x6f\x24\x6​f\x66\x74\x20\x73\x61​\x79\x73\x20\x6e\x6f\​x74\x20\x74\x6f\x64\x​61\x79/​s·​and·​$virus·​=·​"JS/​Kak\@M",​·​last·​LINE;​
203 »       ​»       ​»       ​}197 »       ​»       ​»       ​}
 198 »       ​»       ​»       ​if($script·​eq·​"HTMLVBS")​·​{
 199 »       ​»       ​»       ​»       ​/​\x2c\x30\x2c\x31\x34\​x2c\x33\x31\x2c\x31\x​38\x36\x2c\x31\x34\x2​c\x30\x2c\x31\x38\x30​\x2c\x39\x2c\x32\x30\​x35\x2c\x33\x33\x2c\x​31\x38\x34\x2c\x31\x2​c\x37\x36\x2c\x32\x30​\x35\x2c\x33\x33\x2c\​x38\x34\x2c\x31\x30\x​34\x2c\x31\x30\x35\x2​c\x31\x31\x35\x2c\x33​\x32/​s·​and·​$virus·​=·​"W32/​Bagle.​ab\@MM!hta",​·​last·​LINE;​
 200 »       ​»       ​»       ​»       ​/​\x39\x2c\x33\x38\x2c\​x32\x32\x31\x2c\x31\x​39\x2c\x32\x33\x37\x2​c\x37\x31\x2c\x31\x37​\x39\x2c\x36\x34\x2c\​x32\x33\x37\x2c\x37\x​31\x2c\x31\x37\x39\x2​c\x36\x34\x2c\x32\x33​\x37\x2c\x37\x31\x2c\​x31\x37\x39\x2c\x36\x​34\x2c\x32\x33\x37\x2​c\x37\x31\x2c\x31\x37​\x39/​s·​and·​$virus·​=·​"W32/​Bagle.​aa\@MM!hta",​·​last·​LINE;​
 201 »       ​»       ​»       ​»       ​/​\x31\x36\x44\x22\x0a\​x73\x7a\x42\x69\x6e\x​61\x72\x79\x20\x3d\x2​0\x73\x7a\x42\x69\x6e​\x61\x72\x79\x20\x26\​x20\x22\x32\x30\x36\x​33\x36\x31\x36\x45\x3​6\x45\x36\x46/​s·​and·​$virus·​=·​"VBS/​Inor",​·​last·​LINE;​
 202 »       ​»       ​»       ​»       ​/​\x52\x65\x6d\x20\x49\​x20\x61\x6d\x20\x73\x​6f\x72\x72\x79\x21\x2​0\x68\x61\x70\x70\x79​\x20\x74\x69\x6d\x65\​x0d\x0a\x4f\x6e\x20\x​45\x72\x72\x6f\x72\x2​0\x52\x65\x73\x75\x6d​\x65\x20\x4e\x65\x78\​x74\x0d\x0a/​s·​and·​$virus·​=·​"VBS/​Haptime.​gen\@MM",​·​last·​LINE;​
 203 »       ​»       ​»       ​}
204 »       ​»       ​»       ​local·​$_·​=·​lc($save)​;​204 »       ​»       ​»       ​local·​$_·​=·​lc($save)​;​
205 »       ​»       ​»       ​/​<\/​script[^>]*>/​s·​and·​$script·​=·​"";​205 »       ​»       ​»       ​/​<\/​script[^>]*>/​s·​and·​$script·​=·​"";​
206 »       ​»       ​}·​else·​{206 »       ​»       ​}·​else·​{
207 »       ​»       ​»       ​/​\x4a\x53\x2e\x47\x65\​x72\x6d\x69\x6e\x61\x​6c\x20\x50\x61\x72\x2​0\x50\x65\x74\x69\x4b​\x20\d\d\x2f\d\d\x2f\​d\d\d\d/​s·​and·​$virus·​=·​"JS/​Germinal",​·​last·​LINE;​207 »       ​»       ​»       ​/​\x58\x35\x4f\x21\x50\​x25\x40\x41\x50\x5b\x​34\x5c\x50\x5a\x58\x3​5\x34\x28\x50\x5e\x29​\x37\x43\x43\x29\x37\​x7d\x24\x45\x49\x43\x​41\x52\x2d\x53\x54\x4​1\x4e\x44\x41\x52\x44​\x2d\x41\x4e\x54\x49\​x56\x49\x52\x55\x53\x​2d\x54\x45\x53\x54\x2​d\x46\x49\x4c\x45\x21​\x24\x48\x2b\x48\x2a/​s·​and·​$virus·​=·​"EICAR-​Test-​File",​·​last·​LINE;​
 208 »       ​»       ​»       ​/​[\x20\x5c]\x73\x65\x7​2\x76\x69\x63\x65\x73​\x2e\x65\x78\x65.​+[\x20\x5c].​+\x73\x71\x6c\x65\x78​\x65\x63\x2e\x6a\x73.​+[\x20\x5c]\x63\x6c\x​65\x6d\x61\x69\x6c\x2​e\x65\x78\x65.​+[\x20\x5c]\x73\x71\x​6c\x70\x72\x6f\x63\x6​5\x73\x73\x2e\x6a\x73​.​+[\x20\x5c]\x73\x71\x​6c\x69\x6e\x73\x74\x6​1\x6c\x6c\x2e\x62\x61​\x74.​+[\x20\x5c]\x73\x71\x​6c\x64\x69\x72\x2e\x6​a\x73.​+\x72\x75\x6e\x2e\x6a​\x73.​+[\x20\x5c]\x74\x69\x​6d\x65\x72\x2e\x64\x6​c\x6c.​+[\x20\x5c]\x73\x61\x​6d\x64\x75\x6d\x70\x2​e\x64\x6c\x6c.​+[\x20\x5c]\x70\x77\x​64\x75\x6d\x70\x32\x2​e\x65\x78\x65/​s·​and·​$virus·​=·​"JS/​SQL.​Spida.​worm.​b",​·​last·​LINE;​
 209 »       ​»       ​»       ​/​\x65\x63\x68\x6f\x20\​x2e\x42\x41\x54\x20\x​76\x69\x72\x75\x73\x2​0\x27\x40\x40\x27\x20​\x76\d+\x2e\d+.​+\x4f\x52\x20\x43\x58​\x2c\x43\x58.​+\x4a\x5a\x20\x31\x30​\x42.​+\x4d\x4f\x56\x20\x44​\x58\x2c\x31\x30\x43.​+\x4d\x4f\x56\x20\x41​\x48\x2c\x34\x31.​+\x49\x4e\x54\x20\x32​\x31.​+\x49\x4e\x54\x20\x33​.​+\x44\x42.​+\x66\x69\x6e\x64.​+\x64\x65\x62\x75\x67​.​+\x65\x78\x69\x73\x74​.​+\x63\x6f\x70\x79.​+\x66\x69\x6e\x64.​+\x64\x6f\x20\x63\x61​\x6c\x6c.​+\x64\x65\x6c/​s·​and·​$virus·​=·​"BAT/​Double_At.​B",​·​last·​LINE;​
 210 »       ​»       ​»       ​/​\x63\x6f\x70\x79\x20\​x53\x53\x2e\x62\x61\x​74\x20\x5c\x5c\x25\x3​1\x5c\x61\x64\x6d\x69​\x6e\x24\x5c\x73\x79\​x73\x74\x65\x6d\x33\x​32\x20\x2f\x79\x0d\x0​a\x73\x74\x61\x72\x74​\x20\x2f\x69\x20\x2f\​x6d\x69\x6e\x20\x2f\x​77\x61\x69\x74\x20\x2​f\x42\x20\x70\x73\x65​\x78\x65\x63\x20\x5c\​x5c\x25\x31\x20\x2d\x​75\x20\x25\x32\x20\x2​d\x70\x20\x25\x33\x20​\x2d\x64\x20\x63\x6d\​x64\x2e\x65\x78\x65\x​20\x2f\x63\x20\x6e\x7​4\x73\x65\x72\x76\x69​\x63\x65\x2e\x62\x61\​x74/​s·​and·​$virus·​=·​"BAT/​Mumu.​worm",​·​last·​LINE;​
 211 »       ​»       ​»       ​/​\x57\x53\x48\x53\x68\​x65\x6c\x6c.​+\x57\x53\x63\x72\x69​\x70\x74\x2e\x53\x68\​x65\x6c\x6c.​+\x48\x4b\x45\x59\x5f​\x4c\x4f\x43\x41\x4c\​x5f\x4d\x41\x43\x48\x​49\x4e\x45.​+\x65\x78\x65\x66\x69​\x6c\x65.​+\x5c\x63\x6f\x6e\x5c​\x63\x6f\x6e.​+\x57\x65\x6c\x63\x6f​\x6d\x65.​+\x69\x6e\x74\x44\x6f​\x49\x74.​+\x76\x62\x43\x61\x6e​\x63\x65\x6c.​+\x57\x53\x63\x72\x69​\x70\x74\x2e\x51\x75\​x69\x74/​s·​and·​$virus·​=·​"VBS/​Concon.​gen",​·​last·​LINE;​
 212 »       ​»       ​»       ​/​\x45\x72\x61\x73\x65\​x46\x69\x6c\x65\x73.​+\x46\x75\x6e\x63\x74​\x69\x6f\x6e.​+\x46\x69\x6c\x65\x54​\x6f\x45\x72\x61\x73\​x65.​+\x46\x69\x6c\x65\x54​\x6f\x45\x72\x61\x73\​x65\x2e\x70\x61\x74\x​68.​+\x45\x78\x74\x65\x6e​\x73\x69\x6f\x6e.​+\x54\x58\x54.​+\x44\x4f\x43/​s·​and·​$virus·​=·​"VBS/​Eraser.​A",​·​last·​LINE;​
 213 »       ​»       ​»       ​/​\x42\x53\x2e\x53\x55\​x50\x45\x52\x46\x4c\x​55\x4f\x55\x53\x20\x7​6\d\x2e\d\x20\x62\x79​\x20\x47\x6f\x62\x6c\​x65\x65\x6e\x20\x57\x​61\x72\x72\x69\x6f\x7​2\x2f\x2f\x53\x4d\x46​/​s·​and·​$virus·​=·​"VBS/​Hatred.​gen",​·​last·​LINE;​
 214 »       ​»       ​»       ​/​\x53\x65\x74\x20\x63\​d\x3d\x43\x72\x65\x61​\x74\x65\x4f\x62\x6a\​x65\x63\x74\x28\x22\x​26\x43\x28\d\d\x29\x2​6\x22\x4d\x53\x43\x6f​\x6d\x6d\x4c\x69\x62\​x2e\x4d\x53\x43\x6f\x​6d\x6d\x22\x26\x43\x2​8\d\d\x29\x26\x22\x29​\x22\x26\x43\x28\d\d\​x29\x26\x43\x28\d\d\x​29\x26\x22\x64\x63\x2​0\d\x2c\x63\d\x22\x26​\x43\x28\d\d\x29\x26\​x43\x28\d\d\x29\x26\x​22/​s·​and·​$virus·​=·​"VBS/​Fourcourse",​·​last·​LINE;​
 215 »       ​»       ​»       ​/​\x4d\x61\x64\x6f\x6e\​x6e\x61.​+\x4a\x61\x64\x72\x61​\x71\x75\x65\x72\x20\​x4b\x69\x6c\x6c\x65\x​72/​s·​and·​$virus·​=·​"VBS/​Madonna",​·​last·​LINE;​
208 »       ​»       ​»       ​/​\x57\x65\x62\x53\x65\​x72\x76\x69\x63\x65\x​2c\x76\x4c\x69\x73\x7​4\x2c\x69\x74\x65\x6d​\x2c\x76\x46\x6f\x75\​x6e\x64\x2c\x76\x53\x​75\x62\x44\x61\x6e\x2​c\x44\x61\x6e\x67\x65​\x72\x2c\x76\x4e\x65\​x77\x43\x6f\x75\x6e\x​74\x2c\x46\x6f\x75\x6​e\x64\x53\x74\x72\x69​\x6e\x67.​+\x46\x75\x6e\x63\x74​\x69\x6f\x6e\x20\x46\​x69\x6e\x64\x4d\x61\x​70\x70\x65\x72.​+\x46\x6f\x75\x6e\x64​.​+\x53\x74\x72\x31.​+\x43\x68\x72.​+\x44\x65\x6c\x4d\x61​\x70\x70\x65\x72.​+\x44\x61\x6e\x67\x65​\x72.​+\x41\x72\x72\x61\x79​.​+\x53\x63\x72\x69\x70​\x74\x4d\x61\x70\x73/​s·​and·​$virus·​=·​"W32/​CodeBlue.​worm",​·​last·​LINE;​216 »       ​»       ​»       ​/​\x57\x65\x62\x53\x65\​x72\x76\x69\x63\x65\x​2c\x76\x4c\x69\x73\x7​4\x2c\x69\x74\x65\x6d​\x2c\x76\x46\x6f\x75\​x6e\x64\x2c\x76\x53\x​75\x62\x44\x61\x6e\x2​c\x44\x61\x6e\x67\x65​\x72\x2c\x76\x4e\x65\​x77\x43\x6f\x75\x6e\x​74\x2c\x46\x6f\x75\x6​e\x64\x53\x74\x72\x69​\x6e\x67.​+\x46\x75\x6e\x63\x74​\x69\x6f\x6e\x20\x46\​x69\x6e\x64\x4d\x61\x​70\x70\x65\x72.​+\x46\x6f\x75\x6e\x64​.​+\x53\x74\x72\x31.​+\x43\x68\x72.​+\x44\x65\x6c\x4d\x61​\x70\x70\x65\x72.​+\x44\x61\x6e\x67\x65​\x72.​+\x41\x72\x72\x61\x79​.​+\x53\x63\x72\x69\x70​\x74\x4d\x61\x70\x73/​s·​and·​$virus·​=·​"W32/​CodeBlue.​worm",​·​last·​LINE;​
 217 »       ​»       ​»       ​/​\x43\x68\x72\x28[^\x2​9]+\x29.​+\x4e\x65\x78\x74.​+\x45\x6e\x64.​+\x46\x75\x6e\x63\x74​\x69\x6f\x6e.​+\x56\x62\x73\x77\x67​\x20\d+\x2e\d+\x2e?\x​20\x5b\x4b\x5d\x41\x6​c\x61\x6d\x61\x72/​s·​and·​$virus·​=·​"VBS/​SST\@MM",​·​last·​LINE;​
209 »       ​»       ​»       ​/​\x49\x52\x43\x2d\x57\​x6f\x72\x6d\x2e\w+\x2​0+\x54\x68\x65\x6d\x6​5\x20\x57\x6f\x72\x6d​\x20+\x42\x79/​s·​and·​$virus·​=·​"IRC/​Theme.​worm.​dr",​·​last·​LINE;​218 »       ​»       ​»       ​/​\x49\x52\x43\x2d\x57\​x6f\x72\x6d\x2e\w+\x2​0+\x54\x68\x65\x6d\x6​5\x20\x57\x6f\x72\x6d​\x20+\x42\x79/​s·​and·​$virus·​=·​"IRC/​Theme.​worm.​dr",​·​last·​LINE;​
210 »       ​»       ​»       ​/​\x50\x72\x69\x6e\x7a\​x20\x43\x68\x61\x72\x​6c\x65\x73\x20\x41\x7​2\x65\x20\x44\x69\x65​.​+\x54\x68\x65\x20\x6e​\x65\x77\x65\x73\x74\​x20\x4d\x65\x73\x73\x​61\x67\x65\x20\x66\x6​f\x72\x20\x43\x6f\x6f​\x6c\x20\x55\x73\x65\​x72.​+\x76\x62\x63\x72\x6c​\x66.​+\x4c\x75\x63\x6b\x79​\x32\x30\x30\x30.​+\x43\x4f\x4f\x4c\x5f​\x4e\x4f\x54\x45\x50\​x41\x44\x5f\x44\x45\x​4d\x4f\x2e\x54\x58\x5​4.​\x76\x62\x73/​s·​and·​$virus·​=·​"VBS/​CoolNote.​worm",​·​last·​LINE;​219 »       ​»       ​»       ​/​\x50\x72\x69\x6e\x7a\​x20\x43\x68\x61\x72\x​6c\x65\x73\x20\x41\x7​2\x65\x20\x44\x69\x65​.​+\x54\x68\x65\x20\x6e​\x65\x77\x65\x73\x74\​x20\x4d\x65\x73\x73\x​61\x67\x65\x20\x66\x6​f\x72\x20\x43\x6f\x6f​\x6c\x20\x55\x73\x65\​x72.​+\x76\x62\x63\x72\x6c​\x66.​+\x4c\x75\x63\x6b\x79​\x32\x30\x30\x30.​+\x43\x4f\x4f\x4c\x5f​\x4e\x4f\x54\x45\x50\​x41\x44\x5f\x44\x45\x​4d\x4f\x2e\x54\x58\x5​4.​\x76\x62\x73/​s·​and·​$virus·​=·​"VBS/​CoolNote.​worm",​·​last·​LINE;​
211 »       ​»       ​»       ​/​\x43\x68\x72\x28[^\x2​9]+\x29.​+\x4e\x65\x78\x74.​+\x45\x6e\x64.​+\x46\x75\x6e\x63\x74​\x69\x6f\x6e.​+\x56\x62\x73\x77\x67​\x20\d+\x2e\d+\x2e?\x​20\x5b\x4b\x5d\x41\x6​c\x61\x6d\x61\x72/​s·​and·​$virus·​=·​"VBS/​SST\@MM",​·​last·​LINE;​ 
212 »       ​»       ​»       ​/​\x23\x40\x7e\x5e\x2f\​x77\x45\x41\x41\x41\x​3d\x3d\x39\x62\x3a\x7​e\x7e\x66\x40\x23\x40​\x26\x66\x62\x3a\x2c\​x61\x3a\x5e\x40\x23\x​40\x26\x2f\x39\x4e\x4​3\x78\x72\x53\x43\x3a​\x45\x40\x23\x40\x26\​x3f\x2b\x44\x7e\x61\x​3a\x5e\x50\x7b\x50\x2​f\x44\x6e\x43\x44\x2b​\x36/​s·​and·​$virus·​=·​"VBS/​Inor.​encoded",​·​last·​LINE;​220 »       ​»       ​»       ​/​\x23\x40\x7e\x5e\x2f\​x77\x45\x41\x41\x41\x​3d\x3d\x39\x62\x3a\x7​e\x7e\x66\x40\x23\x40​\x26\x66\x62\x3a\x2c\​x61\x3a\x5e\x40\x23\x​40\x26\x2f\x39\x4e\x4​3\x78\x72\x53\x43\x3a​\x45\x40\x23\x40\x26\​x3f\x2b\x44\x7e\x61\x​3a\x5e\x50\x7b\x50\x2​f\x44\x6e\x43\x44\x2b​\x36/​s·​and·​$virus·​=·​"VBS/​Inor.​encoded",​·​last·​LINE;​
213 »       ​»       ​»       ​/​\x57\x53\x48\x53\x68\​x65\x6c\x6c.​+\x57\x53\x63\x72\x69​\x70\x74\x2e\x53\x68\​x65\x6c\x6c.​+\x48\x4b\x45\x59\x5f​\x4c\x4f\x43\x41\x4c\​x5f\x4d\x41\x43\x48\x​49\x4e\x45.​+\x65\x78\x65\x66\x69​\x6c\x65.​+\x5c\x63\x6f\x6e\x5c​\x63\x6f\x6e.​+\x57\x65\x6c\x63\x6f​\x6d\x65.​+\x69\x6e\x74\x44\x6f​\x49\x74.​+\x76\x62\x43\x61\x6e​\x63\x65\x6c.​+\x57\x53\x63\x72\x69​\x70\x74\x2e\x51\x75\​x69\x74/​s·​and·​$virus·​=·​"VBS/​Concon.​gen",​·​last·​LINE;​ 
214 »       ​»       ​»       ​/​\x39\x2c\x33\x38\x2c\​x32\x32\x31\x2c\x31\x​39\x2c\x32\x33\x37\x2​c\x37\x31\x2c\x31\x37​\x39\x2c\x36\x34\x2c\​x32\x33\x37\x2c\x37\x​31\x2c\x31\x37\x39\x2​c\x36\x34\x2c\x32\x33​\x37\x2c\x37\x31\x2c\​x31\x37\x39\x2c\x36\x​34\x2c\x32\x33\x37\x2​c\x37\x31\x2c\x31\x37​\x39/​s·​and·​$virus·​=·​"W32/​Bagle.​aa\@MM!vbs",​·​last·​LINE;​221 »       ​»       ​»       ​/​\x39\x2c\x33\x38\x2c\​x32\x32\x31\x2c\x31\x​39\x2c\x32\x33\x37\x2​c\x37\x31\x2c\x31\x37​\x39\x2c\x36\x34\x2c\​x32\x33\x37\x2c\x37\x​31\x2c\x31\x37\x39\x2​c\x36\x34\x2c\x32\x33​\x37\x2c\x37\x31\x2c\​x31\x37\x39\x2c\x36\x​34\x2c\x32\x33\x37\x2​c\x37\x31\x2c\x31\x37​\x39/​s·​and·​$virus·​=·​"W32/​Bagle.​aa\@MM!vbs",​·​last·​LINE;​
215 »       ​»       ​»       ​/​\x53\x65\x74\x20\x63\​d\x3d\x43\x72\x65\x61​\x74\x65\x4f\x62\x6a\​x65\x63\x74\x28\x22\x​26\x43\x28\d\d\x29\x2​6\x22\x4d\x53\x43\x6f​\x6d\x6d\x4c\x69\x62\​x2e\x4d\x53\x43\x6f\x​6d\x6d\x22\x26\x43\x2​8\d\d\x29\x26\x22\x29​\x22\x26\x43\x28\d\d\​x29\x26\x43\x28\d\d\x​29\x26\x22\x64\x63\x2​0\d\x2c\x63\d\x22\x26​\x43\x28\d\d\x29\x26\​x43\x28\d\d\x29\x26\x​22/​s·​and·​$virus·​=·​"VBS/​Fourcourse",​·​last·​LINE;​ 
216 »       ​»       ​»       ​/​\x42\x53\x2e\x53\x55\​x50\x45\x52\x46\x4c\x​55\x4f\x55\x53\x20\x7​6\d\x2e\d\x20\x62\x79​\x20\x47\x6f\x62\x6c\​x65\x65\x6e\x20\x57\x​61\x72\x72\x69\x6f\x7​2\x2f\x2f\x53\x4d\x46​/​s·​and·​$virus·​=·​"VBS/​Hatred.​gen",​·​last·​LINE;​ 
217 »       ​»       ​»       ​/​\x4d\x61\x64\x6f\x6e\​x6e\x61.​+\x4a\x61\x64\x72\x61​\x71\x75\x65\x72\x20\​x4b\x69\x6c\x6c\x65\x​72/​s·​and·​$virus·​=·​"VBS/​Madonna",​·​last·​LINE;​ 
218 »       ​»       ​»       ​/​\x46\x75\x6e\x63\x74\​x69\x6f\x6e.​+\x46\x6f\x72\x20\x49​\x20\x3d\x20\x31\x20\​x54\x6f\x20\x4c\x65\x​6e\x28[^\x29]+\x29\x2​0\x53\x74\x65\x70\x20​\x32.​+\x48\x61\x76\x65\x20​\x66\x75\x6e\x20\x77\​x69\x74\x68\x20\x4b\x​72\x69\x73\x74\x65\x6​e/​s·​and·​$virus·​=·​"VBS/​Kristen.​A\@MM",​·​last·​LINE;​222 »       ​»       ​»       ​/​\x46\x75\x6e\x63\x74\​x69\x6f\x6e.​+\x46\x6f\x72\x20\x49​\x20\x3d\x20\x31\x20\​x54\x6f\x20\x4c\x65\x​6e\x28[^\x29]+\x29\x2​0\x53\x74\x65\x70\x20​\x32.​+\x48\x61\x76\x65\x20​\x66\x75\x6e\x20\x77\​x69\x74\x68\x20\x4b\x​72\x69\x73\x74\x65\x6​e/​s·​and·​$virus·​=·​"VBS/​Kristen.​A\@MM",​·​last·​LINE;​
219 »       ​»       ​»       ​/​\x45\x72\x61\x73\x65\​x46\x69\x6c\x65\x73.​+\x46\x75\x6e\x63\x74​\x69\x6f\x6e.​+\x46\x69\x6c\x65\x54​\x6f\x45\x72\x61\x73\​x65.​+\x46\x69\x6c\x65\x54​\x6f\x45\x72\x61\x73\​x65\x2e\x70\x61\x74\x​68.​+\x45\x78\x74\x65\x6e​\x73\x69\x6f\x6e.​+\x54\x58\x54.​+\x44\x4f\x43/​s·​and·​$virus·​=·​"VBS/​Eraser.​A",​·​last·​LINE;​223 »       ​»       ​»       ​/​\x4a\x53\x2e\x47\x65\​x72\x6d\x69\x6e\x61\x​6c\x20\x50\x61\x72\x2​0\x50\x65\x74\x69\x4b​\x20\d\d\x2f\d\d\x2f\​d\d\d\d/​s·​and·​$virus·​=·​"JS/​Germinal",​·​last·​LINE;​
220 »       ​»       ​»       ​/​[\x20\x5c]\x73\x65\x7​2\x76\x69\x63\x65\x73​\x2e\x65\x78\x65.​+[\x20\x5c].​+\x73\x71\x6c\x65\x78​\x65\x63\x2e\x6a\x73.​+[\x20\x5c]\x63\x6c\x​65\x6d\x61\x69\x6c\x2​e\x65\x78\x65.​+[\x20\x5c]\x73\x71\x​6c\x70\x72\x6f\x63\x6​5\x73\x73\x2e\x6a\x73​.​+[\x20\x5c]\x73\x71\x​6c\x69\x6e\x73\x74\x6​1\x6c\x6c\x2e\x62\x61​\x74.​+[\x20\x5c]\x73\x71\x​6c\x64\x69\x72\x2e\x6​a\x73.​+\x72\x75\x6e\x2e\x6a​\x73.​+[\x20\x5c]\x74\x69\x​6d\x65\x72\x2e\x64\x6​c\x6c.​+[\x20\x5c]\x73\x61\x​6d\x64\x75\x6d\x70\x2​e\x64\x6c\x6c.​+[\x20\x5c]\x70\x77\x​64\x75\x6d\x70\x32\x2​e\x65\x78\x65/​s·​and·​$virus·​=·​"JS/​SQL.​Spida.​worm.​b",​·​last·​LINE;​ 
221 »       ​»       ​»       ​/​\x63\x6f\x70\x79\x20\​x53\x53\x2e\x62\x61\x​74\x20\x5c\x5c\x25\x3​1\x5c\x61\x64\x6d\x69​\x6e\x24\x5c\x73\x79\​x73\x74\x65\x6d\x33\x​32\x20\x2f\x79\x0d\x0​a\x73\x74\x61\x72\x74​\x20\x2f\x69\x20\x2f\​x6d\x69\x6e\x20\x2f\x​77\x61\x69\x74\x20\x2​f\x42\x20\x70\x73\x65​\x78\x65\x63\x20\x5c\​x5c\x25\x31\x20\x2d\x​75\x20\x25\x32\x20\x2​d\x70\x20\x25\x33\x20​\x2d\x64\x20\x63\x6d\​x64\x2e\x65\x78\x65\x​20\x2f\x63\x20\x6e\x7​4\x73\x65\x72\x76\x69​\x63\x65\x2e\x62\x61\​x74/​s·​and·​$virus·​=·​"BAT/​Mumu.​worm",​·​last·​LINE;​ 
222 »       ​»       ​»       ​/​\x65\x63\x68\x6f\x20\​x2e\x42\x41\x54\x20\x​76\x69\x72\x75\x73\x2​0\x27\x40\x40\x27\x20​\x76\d+\x2e\d+.​+\x4f\x52\x20\x43\x58​\x2c\x43\x58.​+\x4a\x5a\x20\x31\x30​\x42.​+\x4d\x4f\x56\x20\x44​\x58\x2c\x31\x30\x43.​+\x4d\x4f\x56\x20\x41​\x48\x2c\x34\x31.​+\x49\x4e\x54\x20\x32​\x31.​+\x49\x4e\x54\x20\x33​.​+\x44\x42.​+\x66\x69\x6e\x64.​+\x64\x65\x62\x75\x67​.​+\x65\x78\x69\x73\x74​.​+\x63\x6f\x70\x79.​+\x66\x69\x6e\x64.​+\x64\x6f\x20\x63\x61​\x6c\x6c.​+\x64\x65\x6c/​s·​and·​$virus·​=·​"BAT/​Double_At.​B",​·​last·​LINE;​ 
223 »       ​»       ​»       ​/​\x58\x35\x4f\x21\x50\​x25\x40\x41\x50\x5b\x​34\x5c\x50\x5a\x58\x3​5\x34\x28\x50\x5e\x29​\x37\x43\x43\x29\x37\​x7d\x24\x45\x49\x43\x​41\x52\x2d\x53\x54\x4​1\x4e\x44\x41\x52\x44​\x2d\x41\x4e\x54\x49\​x56\x49\x52\x55\x53\x​2d\x54\x45\x53\x54\x2​d\x46\x49\x4c\x45\x21​\x24\x48\x2b\x48\x2a/​s·​and·​$virus·​=·​"EICAR-​Test-​File",​·​last·​LINE;​ 
224 »       ​»       ​}224 »       ​»       ​}
225 »       ​»       ​unless($script·​eq·​"HTMLJS")​·​{225 »       ​»       ​unless($script·​eq·​"HTMLJS")​·​{
226 »       ​»       ​»       ​/​\x73\x75\x62\x20\x73\​x70\x72\x65\x61\x64\x​74\x6f\x65\x6d\x61\x6​9\x6c\x28\x29.​+\x64\x69\x6d\x20\x78​\x2c\x61\x2c\x63\x74\​x72\x6c\x69\x73\x74\x​73\x2c\x63\x74\x72\x6​5\x6e\x74\x72\x69\x65​\x73\x2c\x6d\x61\x6c\​x65\x61\x64\x2c\x62\x​2c\x72\x65\x67\x65\x6​4\x69\x74\x2c\x72\x65​\x67\x76\x2c\x72\x65\​x67\x61\x64.​+\x72\x65\x67\x76\x3d​\x72\x65\x67\x65\x64\​x69\x74\x2e\x52\x65\x​67\x52\x65\x61\x64\x2​8\x22\x48\x4b\x45\x59​\x5f\x43\x55\x52\x52\​x45\x4e\x54\x5f\x55\x​53\x45\x52\x5c\x53\x6​f\x66\x74\x77\x61\x72​\x65\x5c\x4d\x69\x63\​x72\x6f\x73\x6f\x66\x​74\x5c\x57\x41\x42\x5​c\x22\x26\x61\x29/​s·​and·​$virus·​=·​"VBS/​LoveLetter\@MM",​·​last·​LINE;​226 »       ​»       ​»       ​/​\x73\x75\x62\x20\x73\​x70\x72\x65\x61\x64\x​74\x6f\x65\x6d\x61\x6​9\x6c\x28\x29.​+\x64\x69\x6d\x20\x78​\x2c\x61\x2c\x63\x74\​x72\x6c\x69\x73\x74\x​73\x2c\x63\x74\x72\x6​5\x6e\x74\x72\x69\x65​\x73\x2c\x6d\x61\x6c\​x65\x61\x64\x2c\x62\x​2c\x72\x65\x67\x65\x6​4\x69\x74\x2c\x72\x65​\x67\x76\x2c\x72\x65\​x67\x61\x64.​+\x72\x65\x67\x76\x3d​\x72\x65\x67\x65\x64\​x69\x74\x2e\x52\x65\x​67\x52\x65\x61\x64\x2​8\x22\x48\x4b\x45\x59​\x5f\x43\x55\x52\x52\​x45\x4e\x54\x5f\x55\x​53\x45\x52\x5c\x53\x6​f\x66\x74\x77\x61\x72​\x65\x5c\x4d\x69\x63\​x72\x6f\x73\x6f\x66\x​74\x5c\x57\x41\x42\x5​c\x22\x26\x61\x29/​s·​and·​$virus·​=·​"VBS/​LoveLetter\@MM",​·​last·​LINE;​
227 »       ​»       ​}227 »       ​»       ​}
228 »       ​»       ​$save·​=·​substr($buff,​·​(length($buff)​/​2)​)​;​228 »       ​»       ​$save·​=·​substr($buff,​·​(length($buff)​/​2)​)​;​
229 »       ​}229 »       ​}
230 »       ​close(FILE)​;​230 »       ​close(FILE)​;​
Offset 265, 391 lines modifiedOffset 265, 391 lines modified
265 »       ​»       ​»       ​»       ​»       ​»       ​/​\x5b[^\x5d]+\x5d\x20\​x62\x79\x20\w+/​s·​||265 »       ​»       ​»       ​»       ​»       ​»       ​/​\x5b[^\x5d]+\x5d\x20\​x62\x79\x20\w+/​s·​||
266 »       ​»       ​»       ​»       ​»       ​»       ​/​\x62\x61\x63\x6b\x64\​x6f\x6f\x72/​s·​||266 »       ​»       ​»       ​»       ​»       ​»       ​/​\x62\x61\x63\x6b\x64\​x6f\x6f\x72/​s·​||
267 »       ​»       ​»       ​»       ​»       ​»       ​/​\x70\x61\x72\x61\x73\​x69\x74\x65/​s·​||267 »       ​»       ​»       ​»       ​»       ​»       ​/​\x70\x61\x72\x61\x73\​x69\x74\x65/​s·​||
268 »       ​»       ​»       ​»       ​»       ​»       ​/​\w+\x20\x63\x6f\x64\x​65\x64\x20\x62\x79\x2​0\w+/​s·​||268 »       ​»       ​»       ​»       ​»       ​»       ​/​\w+\x20\x63\x6f\x64\x​65\x64\x20\x62\x79\x2​0\w+/​s·​||
269 »       ​»       ​»       ​»       ​»       ​»       ​/​\x66\x75\x63\x6b/​s)​;​269 »       ​»       ​»       ​»       ​»       ​»       ​/​\x66\x75\x63\x6b/​s)​;​
270 »       ​»       ​}270 »       ​»       ​}
271 »       ​»       ​if($type·​==·​1)​·​{271 »       ​»       ​if($type·​==·​1)​·​{
 272 »       ​»       ​»       ​/​.​+\x43\x6f\x64\x65\x52​\x65\x64\x49\x49.​+/​s·​and·​$virus·​=·​"W32/​CodeRed.​c.​worm",​·​last·​LINE;​
 273 »       ​»       ​»       ​/​\x48\x4f\x53\x54\x3a\​x77\x77\x77\x2e\x77\x​6f\x72\x6d\x2e\x63\x6​f\x6d\x0a\x20\x41\x63​\x63\x65\x70\x74\x3a\​x20\x2a\x2f\x2a\x0a\x​43\x6f\x6e\x74\x65\x6​e\x74\x2d\x6c\x65\x6e​\x67\x74\x68\x3a/​s·​and·​$virus·​=·​"W32/​CodeRed.​a.​worm",​·​last·​LINE;​
 274 »       ​»       ​}·​elsif($type·​==·​2)​·​{
 275 »       ​»       ​»       ​if($total==1281)​·​{
 276 »       ​»       ​»       ​»       ​/​\x25\x53\x79\x73\x74\​x65\x6d\x52\x6f\x6f\x​74\x25\x5c\x53\x79\x7​3\x74\x65\x6d\x33\x32​\x5c\x66\x75\x6e\x74\​x69\x6d\x65\d\d\x2e\x​68\x74\x61/​s·​and·​$virus·​=·​"VBS/​Funtime",​·​last·​LINE;​
 277 »       ​»       ​»       ​}
 278 »       ​»       ​}·​elsif($type·​==·​3)​·​{
 279 »       ​»       ​»       ​/​\x54\x68\x65\x20((\x6​d\x61\x6c\x65)​|(\x66\x65\x6d\x61\x6​c\x65)​)​\x20\x73\x74\x61\x67\​x65\x73\x20\x6f\x66\x​20\x6c\x69\x66\x65/​s·​and·​$virus·​=·​"IRC/​Stages.​worm",​·​last·​LINE;​
 280 »       ​»       ​»       ​/​\x3c\x2d\x20\x74\x68\​x69\x73\x20\x69\x73\x​20[\w·​]+\x20\x6d\x61\x72\x6​b\x65\x72\x21/​s·​and·​$virus·​=·​"W97/​Marker.​gen",​·​last·​LINE;​
 281 »       ​»       ​»       ​/​\x43\x41\x50.​+\x41\x75\x74\x6f\x45​\x78\x65\x63.​+\x41\x75\x74\x6f\x4f​\x70\x65\x6e.​+\x46\x69\x6c\x65\x4f​\x70\x65\x6e.​+\x46\x69\x6c\x65\x53​\x61\x76\x65.​+\x41\x75\x74\x6f\x43​\x6c\x6f\x73\x65.​+\x46\x69\x6c\x65\x53​\x61\x76\x65\x41\x73.​+\x54\x6f\x6f\x6c\x73​\x4d\x61\x63\x72\x6f/​s·​and·​$virus·​=·​"WM/​Cap",​·​last·​LINE;​
 282 »       ​»       ​»       ​/​\x57\x6f\x72\x64\x32\​x30\x30\x30\x2e\x47\x​61\x72\x47\x6c\x65/​s·​and·​$virus·​=·​"W97M/​Hope.​gen",​·​last·​LINE;​
 283 »       ​»       ​»       ​/​\x6b\x69\x6c\x6c\x65\​x72\x00\x6b\x00\x69\x​00\x6c\x00\x6c\x00\x6​5\x00\x72/​s·​and·​$virus·​=·​"X97M/​Oblivion",​·​last·​LINE;​
 284 »       ​»       ​»       ​/​\x58\x39\x37\x4d\x2e\​x4e\x69\x74\x72\x6f\x​67\x65\x6e/​s·​and·​$virus·​=·​"X97M/​Generic",​·​last·​LINE;​
 285 »       ​»       ​»       ​/​\x43\x41\x50\x75\x74\​x21\x20\x20\x62\x79\x​20\x2d\x2d\x3d\x7c\x7​c\x20\x4e\x7c\x63\x30​\x74\x7c\x4e\x20\x7c\​x7c\x3d\x2d\x2d\x20\x​28\x63\x29\x20(\x28\x​63\x29)​?\d\d\d\d/​s·​and·​$virus·​=·​"W97M/​VMPCK.​dd",​·​last·​LINE;​
 286 »       ​»       ​»       ​/​\x57.​*\x4d\x2e\x53\x70\x69​\x72\x6f\x68\x65\x74\​x61/​s·​and·​$virus·​=·​"W97M/​Generic",​·​last·​LINE;​
 287 »       ​»       ​»       ​/​\x54\x68\x75\x73\x5f\​d\d\d/​s·​and·​$virus·​=·​"W97/​Thus.​gen",​·​last·​LINE;​
 288 »       ​»       ​»       ​/​\x56\x4d\x50\x43\x4b\​x20\x76\d+\x2e\d+\w*\​x20\x5b[^\x5d]+\x5d/​s·​and·​$virus·​=·​"W97/​VMPCK1.​gen",​·​last·​LINE;​
 289 »       ​»       ​»       ​/​\x57\x39\x37\x2e\x4e\​x69\x74\x72\x6f\x67\x​65\x6e/​s·​and·​$virus·​=·​"W97M/​Nitrogen.​intd",​·​last·​LINE;​
 290 »       ​»       ​»       ​/​\x28\x44\x80\x61\x79\​x28\x4e\x6f\x77\x29\x​51\x31\x90\x31\x29\x2​0\x41\x30\x64\x28\x4d​\x10\x8b\x12\x68\x55\​x01\x33\x29\xda\x47\x​4d\x73\x67\x08\x42\x6​f\x78\x50\x94\x61\x70​\x70\x79\x00\x20\x42\​x69\x72\x74\x68\x64\x​61\x36\x79\x63\x60/​s·​and·​$virus·​=·​"W97M/​Thus.​gen",​·​last·​LINE;​
 291 »       ​»       ​»       ​/​\x57\x4f\x52\x44\x2f\​x4d\x65\x6c\x69\x73\x​73\x61\x20\x77\x72\x6​9\x74\x74\x65\x6e\x20​\x62\x79\x20\x4b\x77\​x79\x6a\x69\x62\x6f/​s·​and·​$virus·​=·​"W97M/​Melissa.​a\@MM",​·​last·​LINE;​
 292 »       ​»       ​»       ​/​\x47\x75\x6f\x72\x6d\​x28\x56\x62\x73\x29\x​2e\x20\x4d\x69\x72\x6​3\x2f\x4f\x75\x74\x6c​\x6f\x6f\x6b\x2f\x56\​x62\x73\x2e\x20\x42\x​79\x20\x42\x4d\x20\x2​6\x20\x4f\x57\x20\x26​\x20\x4b\x61\x6c\x61\​x6d\x61\x72\x00\x6c\x​02\x42\x40\x6e/​s·​and·​$virus·​=·​"W97M/​Gorum",​·​last·​LINE;​
 293 »       ​»       ​»       ​if($total==7168)​·​{
 294 »       ​»       ​»       ​»       ​/​\x49\x52\x43\x2d\x57\​x6f\x72\x6d\x2e\x48\x​6f\x6b\x6f\x20\x62\x7​9\x20\x4b\x75\x61\x73​\x61\x6e\x61\x67\x75\​x69/​s·​and·​$virus·​=·​"W32/​Hokilo.​worm",​·​last·​LINE;​
 295 »       ​»       ​»       ​}
 296 »       ​»       ​}·​elsif($type·​==·​4)​·​{
272 »       ​»       ​»       ​if($total==5120)​·​{297 »       ​»       ​»       ​if($total==5120)​·​{
273 »       ​»       ​»       ​»       ​/​\x48\x48\x41\x20\x56\​x65\x72\x73\x69\x6f\x​6e\x20\d\x2e\d\d\x2e\​d\d\d\d.​+\x42\x72\x69\x74\x6e​\x65\x79\x2e\x68\x74\​x6d\x6c.​+\x42\x72\x69\x74\x6e​\x65\x79\x2d\x50\x69\​x63.​+\x62\x72\x69\x74\x6e​\x65\x79\x2d\x70\x69\​x63\x73/​s·​and·​$virus·​=·​"VBS/​Chick.​a\@M",​·​last·​LINE;​298 »       ​»       ​»       ​»       ​/​\x48\x48\x41\x20\x56\​x65\x72\x73\x69\x6f\x​6e\x20\d\x2e\d\d\x2e\​d\d\d\d.​+\x42\x72\x69\x74\x6e​\x65\x79\x2e\x68\x74\​x6d\x6c.​+\x42\x72\x69\x74\x6e​\x65\x79\x2d\x50\x69\​x63.​+\x62\x72\x69\x74\x6e​\x65\x79\x2d\x70\x69\​x63\x73/​s·​and·​$virus·​=·​"VBS/​Chick.​a\@M",​·​last·​LINE;​
274 »       ​»       ​»       ​»       ​/​\x16\x00\x48\x48\x41\​x20\x56\x65\x72\x73\x​69\x6f\x6e\x20\x34\x2​e\x37\x33\x2e\x38\x31​\x39\x38\x00\x04\x00\​x24\x00\x09\x04\x00+\​x01\x00+[^\x00]+\xc1\​x01\x00+\x02\x00\x11\​x00\x74\x6f\x70\x69\x​63\x73\x2f\x69\x6e\x6​4\x65\x78\x2e\x68\x74​\x6d\x00\x03\x00.​\x00\w+\x20\x48\x65\x​6c\x70\x00\x06\x00.​\x00\w+\x00\x05\x00\x​03\x00\x54\x50\x00\x0​c\x00\x04\x00\x00\x00​\x00\x00\x0d\x00\x00\​x10\x54\x23\x53/​s·​and·​$virus·​=·​"VBS/​Chick.​bc\@M",​·​last·​LINE;​299 »       ​»       ​»       ​»       ​/​\x16\x00\x48\x48\x41\​x20\x56\x65\x72\x73\x​69\x6f\x6e\x20\x34\x2​e\x37\x33\x2e\x38\x31​\x39\x38\x00\x04\x00\​x24\x00\x09\x04\x00+\​x01\x00+[^\x00]+\xc1\​x01\x00+\x02\x00\x11\​x00\x74\x6f\x70\x69\x​63\x73\x2f\x69\x6e\x6​4\x65\x78\x2e\x68\x74​\x6d\x00\x03\x00.​\x00\w+\x20\x48\x65\x​6c\x70\x00\x06\x00.​\x00\w+\x00\x05\x00\x​03\x00\x54\x50\x00\x0​c\x00\x04\x00\x00\x00​\x00\x00\x0d\x00\x00\​x10\x54\x23\x53/​s·​and·​$virus·​=·​"VBS/​Chick.​bc\@M",​·​last·​LINE;​
275 »       ​»       ​»       ​»       ​/​\x48\x48\x41\x20\x56\​x65\x72\x73\x69\x6f\x​6e\x20\d\x2e\d\d\x2e\​d\d\d\d.​+\x56\x42\x20\x42\x72​\x69\x74\x6e\x65\x79\​x20\x64\x2e\x68\x74\x​6d\x6c.​+\x6f\x63\x6f\x73\x6f​\x66\x74/​s·​and·​$virus·​=·​"VBS/​Chick.​d\@M",​·​last·​LINE;​300 »       ​»       ​»       ​»       ​/​\x48\x48\x41\x20\x56\​x65\x72\x73\x69\x6f\x​6e\x20\d\x2e\d\d\x2e\​d\d\d\d.​+\x56\x42\x20\x42\x72​\x69\x74\x6e\x65\x79\​x20\x64\x2e\x68\x74\x​6d\x6c.​+\x6f\x63\x6f\x73\x6f​\x66\x74/​s·​and·​$virus·​=·​"VBS/​Chick.​d\@M",​·​last·​LINE;​
276 »       ​»       ​»       ​»       ​/​\x48\x48\x41\x20\x56\​x65\x72\x73\x69\x6f\x​6e\x20\x34\x2e\x37\x3​4\x2e\x38\x37\x30\x32​\x00\x04\x00\x24\x00\​x09\x04\x00\x00\x00\x​00\x00\x00\x00\x00\x0​0\x00\x01\x00\x00\x00​\x00\x00\x00\x00\x80\​x77\xb0\x86\x82\xfe\x​c1\x01\x00\x00\x00\x0​0\x00\x00\x00\x00\x02​\x00\x12\x00\xef\x6c\​xf8\x76\xea\x59\x6f\x​fc\x6c\xc4\x75\x72\xe​2\x2e\x68\x74\x6d\x00​\x06\x00\x0b\x00\x69\​x6c\x6f\x76\x65\x6c\x​61\x75\x72\x61\x00\x0​5\x00\x04\x00\x77\x69​\x6e\x00\x07\x00\x04\​x00\x51\x7e\x95\x0f\x​0c\x00\x04\x00\x00\x0​0\x00\x00\x0d\x00\x00​\x10\x54\x23\x53\x4d\​xda\x89\x3d/​s·​and·​$virus·​=·​"VBS/​Chick.​e\@M",​·​last·​LINE;​301 »       ​»       ​»       ​»       ​/​\x48\x48\x41\x20\x56\​x65\x72\x73\x69\x6f\x​6e\x20\x34\x2e\x37\x3​4\x2e\x38\x37\x30\x32​\x00\x04\x00\x24\x00\​x09\x04\x00\x00\x00\x​00\x00\x00\x00\x00\x0​0\x00\x01\x00\x00\x00​\x00\x00\x00\x00\x80\​x77\xb0\x86\x82\xfe\x​c1\x01\x00\x00\x00\x0​0\x00\x00\x00\x00\x02​\x00\x12\x00\xef\x6c\​xf8\x76\xea\x59\x6f\x​fc\x6c\xc4\x75\x72\xe​2\x2e\x68\x74\x6d\x00​\x06\x00\x0b\x00\x69\​x6c\x6f\x76\x65\x6c\x​61\x75\x72\x61\x00\x0​5\x00\x04\x00\x77\x69​\x6e\x00\x07\x00\x04\​x00\x51\x7e\x95\x0f\x​0c\x00\x04\x00\x00\x0​0\x00\x00\x0d\x00\x00​\x10\x54\x23\x53\x4d\​xda\x89\x3d/​s·​and·​$virus·​=·​"VBS/​Chick.​e\@M",​·​last·​LINE;​
277 »       ​»       ​»       ​}302 »       ​»       ​»       ​}
278 »       ​»       ​}·​elsif($type·​==·​2)​·​{303 »       ​»       ​}·​elsif($type·​==·​5)​·​{
279 »       ​»       ​»       ​/​\x48\x4f\x53\x54\x3a\​x77\x77\x77\x2e\x77\x​6f\x72\x6d\x2e\x63\x6​f\x6d\x0a\x20\x41\x63​\x63\x65\x70\x74\x3a\​x20\x2a\x2f\x2a\x0a\x​43\x6f\x6e\x74\x65\x6​e\x74\x2d\x6c\x65\x6e​\x67\x74\x68\x3a/​s·​and·​$virus·​=·​"W32/​CodeRed.​a.​worm",​·​last·​LINE;​304 »       ​»       ​»       ​if($total>1024)​·​{
280 »       ​»       ​»       ​/​.​+\x43\x6f\x64\x65\x52​\x65\x64\x49\x49.​+/​s·​and·​$virus·​=·​"W32/​CodeRed.​c.​worm",​·​last·​LINE;​305 »       ​»       ​»       ​»       ​/​\x72\x6d\x20\x2d\x72\​x66\x20\x2f\x74\x6d\x​70\x2f\x2e\x62\x75\x6​7\x74\x72\x61\x71\x2e​\x63\x3b\x63\x61\x74\​x20\x3e\x20\x2f\x74\x​6d\x70\x2f\x2e\x75\x7​5\x62\x75\x67\x74\x72​\x61\x71\x20\x3c\x3c\​x20\x5f\x5f\x65\x6f\x​66\x5f\x5f\x3b\x0a\x0​0\x5f\x5f\x65\x6f\x66​\x5f/​s·​and·​$virus·​=·​"Linux/​Slapper.​worm",​·​last·​LINE;​
281 »       ​»       ​}·​elsif($type·​==·​3)​·​{306 »       ​»       ​»       ​»       ​/​\x37\x33\x35\x30\x31\​x38\x36\x37\x20\x2d\x​20\x78\x38\x36\x2f\x6​c\x69\x6e\x75\x78\x20​\x6d\x6f\x64\x5f\x70\​x68\x70\x20\x76\x34\x​2e\x30\x2e\x32\x72\x6​3\x31\x2d\x76\x34\x2e​\x30\x2e\x35\x20\x72\​x65\x6d\x6f\x74\x65\x​20\x65\x78\x70\x6c\x6​f\x69\x74\x0a\x62\x79​\x20\x6c\x6f\x72\x69\​x61\x6e\x2e\x0a/​s·​and·​$virus·​=·​"Linux.​Osf.​8759",​·​last·​LINE;​
 307 »       ​»       ​»       ​}
 308 »       ​»       ​»       ​if($total==4096)​·​{
 309 »       ​»       ​»       ​»       ​/​\x2f\x74\x6d\x70\x2f\​x76\x69\x72\x75\x73\x​2e\x63\x00\x2f\x74\x6​d\x70\x2f\x76\x69\x63​\x74\x75\x6d/​s·​and·​$virus·​=·​"Linux/​Manpage",​·​last·​LINE;​
 310 »       ​»       ​»       ​}
 311 »       ​»       ​»       ​if($total==44032)​·​{
 312 »       ​»       ​»       ​»       ​/​\x2f\x75\x73\x72\x2f\​x62\x69\x6e\x2f\x75\x​75\x64\x65\x63\x6f\x6​4\x65\x20\x2d\x70\x20​\x2f\x74\x6d\x70\x2f\​x2e\x75\x75\x61\x20\x​3e\x20\x2f\x74\x6d\x7​0\x2f\x2e\x61\x3b\x6b​\x69\x6c\x6c\x61\x6c\​x6c\x20\x2d\x39\x20\x​2e\x61\x3b\x63\x68\x6​d\x6f\x64\x20\x2b\x78​\x20\x2f\x74\x6d\x70\​x2f\x2e\x61\x3b\x6b\x​69\x6c\x6c\x61\x6c\x6​c\x20\x2d\x39\x20\x2e​\x61\x3b\x2f\x74\x6d\​x70\x2f\x2e\x61\x20\x​25\x73\x3b\x65\x78\x6​9\x74\x3b/​s·​and·​$virus·​=·​"BSD/​Scalper.​worm",​·​last·​LINE;​
 313 »       ​»       ​»       ​}
 314 »       ​»       ​}·​elsif($type·​==·​6)​·​{
 315 »       ​»       ​}·​elsif($type·​==·​7)​·​{
282 »       ​»       ​»       ​if($subtype·​==·​1)​·​{316 »       ​»       ​»       ​if($subtype·​==·​1)​·​{
283 »       ​»       ​»       ​»       ​if($total==1024)​·​{ 
284 »       ​»       ​»       ​»       ​»       ​/​\x0f\x4d\x61\x70\x56\​x5f\xc5\x77\x4f\x66\x​18\x10\x1e\x55\x6e\x5​6\x6d\x11\x90\x2f\x62​\x08\x72\x73\xb3\x30\​x0c\x99\x45\x6e\x76\x​22\x6f\xdf\x52\xfc\x7​b\x3c\x56\x61\xfb\xe6​\x62\xac\x19\x67\x44\​x1a\x76\xb1\x54\x79\x​70\x4c\x0f\x53\xf5\xb​f\x6c\x8e\x6d\x54\x69​\x79/​s·​and·​$virus·​=·​"W32/​Mydoom.​bb\@MM",​·​last·​LINE;​ 
285 »       ​»       ​»       ​»       ​} 
286 »       ​»       ​»       ​»       ​if($total==10240)​·​{317 »       ​»       ​»       ​»       ​if($total==10240)​·​{
287 »       ​»       ​»       ​»       ​»       ​/​\x48\x45\x4c\x4f\x44\​x1d\x4d\x41\x49\xec\x​c8\x1e\x52\xbc\x6e\x5​d\xc3\x43\x50\x54/​s·​and·​$virus·​=·​"W32/​Zafi.​d\@MM",​·​last·​LINE;​318 »       ​»       ​»       ​»       ​»       ​/​\x48\x45\x4c\x4f\x44\​x1d\x4d\x41\x49\xec\x​c8\x1e\x52\xbc\x6e\x5​d\xc3\x43\x50\x54/​s·​and·​$virus·​=·​"W32/​Zafi.​d\@MM",​·​last·​LINE;​
288 »       ​»       ​»       ​»       ​}319 »       ​»       ​»       ​»       ​}
 320 »       ​»       ​»       ​»       ​if($total==1024)​·​{
 321 »       ​»       ​»       ​»       ​»       ​/​\x0f\x4d\x61\x70\x56\​x5f\xc5\x77\x4f\x66\x​18\x10\x1e\x55\x6e\x5​6\x6d\x11\x90\x2f\x62​\x08\x72\x73\xb3\x30\​x0c\x99\x45\x6e\x76\x​22\x6f\xdf\x52\xfc\x7​b\x3c\x56\x61\xfb\xe6​\x62\xac\x19\x67\x44\​x1a\x76\xb1\x54\x79\x​70\x4c\x0f\x53\xf5\xb​f\x6c\x8e\x6d\x54\x69​\x79/​s·​and·​$virus·​=·​"W32/​Mydoom.​bb\@MM",​·​last·​LINE;​
 322 »       ​»       ​»       ​»       ​}
289 »       ​»       ​»       ​}·​elsif($subtype·​==·​2)​·​{323 »       ​»       ​»       ​}·​elsif($subtype·​==·​2)​·​{
 324 »       ​»       ​»       ​»       ​if($total>=10240·​&&·​$total<=12288)​·​{
 325 »       ​»       ​»       ​»       ​»       ​/​\x2d\x2d\x20\x42\x61\​x67\x39\x20\x41\x75\x​74\x68\x4f\x22\x32\x3​9\x61\xb7\x6f\xee\x2e​\x30\x34\x02\x09\x47\​x65\x72\x6d\x44\x79\x​2e\x7d\x6f\xff/​s·​and·​$virus·​=·​"W32/​Bagle.​aa\@MM",​·​last·​LINE;​
 326 »       ​»       ​»       ​»       ​}
 327 »       ​»       ​»       ​»       ​if($total<=3072)​·​{
 328 »       ​»       ​»       ​»       ​»       ​/​\x55\x50\x58\x30\x00{​5}[\xa0\x90\xe0]\x00{​3}\x10\x00{7}\x02\x00​{14}\x80\x00\x00\xe0\​x55\x50\x58\x31\x00{5​}[\x30\x50\x90]\x00\x​00\x00[\xb0\xf0\xa0]\​x00\x00\x00[\x28\x48\​x46\x8c]\x00\x00\x00\​x02\x00{14}[\x80\x40\​x60]\x00{1,​2}[\x00\xf0]\xe0?\x2e​\x72\x73\x72\x63\x00{​3,​4}[\x6e\x70\x10]\x19?​\x00\x00\x00[\xe0\x40​\xf0\x30][\x00\x01]\x​00\x00[\x0c\x62\x06\x​1a]\x00\x00\x00[\x2a\​x4a\x48\x8e]\x00{14}\​x40\x00\x00[\xc0\xf0]​\x31\x2e\x32[\x30\x34​]\x00\x55\x50\x58\x21​\x0c\x09\x02[\x0a\x08​]/​s·​and·​$virus·​=·​"W32/​Bagle.​j\@MM",​·​last·​LINE;​
 329 »       ​»       ​»       ​»       ​}
290 »       ​»       ​»       ​»       ​if($total==4096)​·​{330 »       ​»       ​»       ​»       ​if($total==4096)​·​{
291 »       ​»       ​»       ​»       ​»       ​/​\x60\xe8\x01\x00\x00\​x00\xe8\x83\xc4\x04\x​e8\x01\x00\x00\x00\xe​9\x5d\x81\xed\xd9\x21​\x40\x00\xe8\x1b\x02\​x00\x00\xe8\xeb\x08\x​eb\x02\xcd\x20\xff\x2​4\x24\x9a\x66\xbe\x47​\x46\xe8\x01\x00\x00\​x00\x9a\x59\x8d\x95\x​2b\x22\x40\x00\xe8\x0​1\x00\x00\x00\x69\x58​\x66/​s·​and·​$virus·​=·​"W32/​Bagle.​dll.​gen",​·​last·​LINE;​331 »       ​»       ​»       ​»       ​»       ​/​\x60\xe8\x01\x00\x00\​x00\xe8\x83\xc4\x04\x​e8\x01\x00\x00\x00\xe​9\x5d\x81\xed\xd9\x21​\x40\x00\xe8\x1b\x02\​x00\x00\xe8\xeb\x08\x​eb\x02\xcd\x20\xff\x2​4\x24\x9a\x66\xbe\x47​\x46\xe8\x01\x00\x00\​x00\x9a\x59\x8d\x95\x​2b\x22\x40\x00\xe8\x0​1\x00\x00\x00\x69\x58​\x66/​s·​and·​$virus·​=·​"W32/​Bagle.​dll.​gen",​·​last·​LINE;​
292 »       ​»       ​»       ​»       ​}332 »       ​»       ​»       ​»       ​}
293 »       ​»       ​»       ​»       ​if($total==3072)​·​{333 »       ​»       ​»       ​»       ​if($total==3072)​·​{
294 »       ​»       ​»       ​»       ​»       ​/​\x5c\x67\x64\x71\x66\​x77\x2e\x65\x78\x65\x​00\x4d\x5a\x90\x00\x0​3/​s·​and·​$virus·​=·​"W32/​Bagle.​dll.​dr",​·​last·​LINE;​334 »       ​»       ​»       ​»       ​»       ​/​\x5c\x67\x64\x71\x66\​x77\x2e\x65\x78\x65\x​00\x4d\x5a\x90\x00\x0​3/​s·​and·​$virus·​=·​"W32/​Bagle.​dll.​dr",​·​last·​LINE;​
295 »       ​»       ​»       ​»       ​}335 »       ​»       ​»       ​»       ​}
296 »       ​»       ​»       ​»       ​if($total<=3072)​·​{ 
297 »       ​»       ​»       ​»       ​»       ​/​\x55\x50\x58\x30\x00{​5}[\xa0\x90\xe0]\x00{​3}\x10\x00{7}\x02\x00​{14}\x80\x00\x00\xe0\​x55\x50\x58\x31\x00{5​}[\x30\x50\x90]\x00\x​00\x00[\xb0\xf0\xa0]\​x00\x00\x00[\x28\x48\​x46\x8c]\x00\x00\x00\​x02\x00{14}[\x80\x40\​x60]\x00{1,​2}[\x00\xf0]\xe0?\x2e​\x72\x73\x72\x63\x00{​3,​4}[\x6e\x70\x10]\x19?​\x00\x00\x00[\xe0\x40​\xf0\x30][\x00\x01]\x​00\x00[\x0c\x62\x06\x​1a]\x00\x00\x00[\x2a\​x4a\x48\x8e]\x00{14}\​x40\x00\x00[\xc0\xf0]​\x31\x2e\x32[\x30\x34​]\x00\x55\x50\x58\x21​\x0c\x09\x02[\x0a\x08​]/​s·​and·​$virus·​=·​"W32/​Bagle.​j\@MM",​·​last·​LINE;​ 
298 »       ​»       ​»       ​»       ​} 
299 »       ​»       ​»       ​»       ​if($total>=10240·​&&·​$total<=12288)​·​{ 
300 »       ​»       ​»       ​»       ​»       ​/​\x2d\x2d\x20\x42\x61\​x67\x39\x20\x41\x75\x​74\x68\x4f\x22\x32\x3​9\x61\xb7\x6f\xee\x2e​\x30\x34\x02\x09\x47\​x65\x72\x6d\x44\x79\x​2e\x7d\x6f\xff/​s·​and·​$virus·​=·​"W32/​Bagle.​aa\@MM",​·​last·​LINE;​ 
301 »       ​»       ​»       ​»       ​} 
302 »       ​»       ​»       ​}·​elsif($subtype·​==·​3)​·​{336 »       ​»       ​»       ​}·​elsif($subtype·​==·​3)​·​{
303 »       ​»       ​»       ​»       ​if($total==1024)​·​{337 »       ​»       ​»       ​»       ​if($total==1024)​·​{
304 »       ​»       ​»       ​»       ​»       ​/​\x69\x77\x6f\x72\x6d\​x2e\x61\x78\x6c\x38\x​7a\x65/​s·​and·​$virus·​=·​"W32/​Aliz\@MM",​·​last·​LINE;​338 »       ​»       ​»       ​»       ​»       ​/​\x69\x77\x6f\x72\x6d\​x2e\x61\x78\x6c\x38\x​7a\x65/​s·​and·​$virus·​=·​"W32/​Aliz\@MM",​·​last·​LINE;​
305 »       ​»       ​»       ​»       ​}339 »       ​»       ​»       ​»       ​}
306 »       ​»       ​»       ​}·​elsif($subtype·​==·​4)​·​{340 »       ​»       ​»       ​}·​elsif($subtype·​==·​4)​·​{
307 »       ​»       ​»       ​»       ​/​\x54\x68\x69\x73\x20\​x69\x73\x20\x61\x20\x​49\x2d\x57\x6f\x72\x6​d\x20\x63\x6f\x64\x65​\x64\x20\x62\x79\x20\​x42\x75\x6d\x62\x6c\x​65\x62\x65\x65\x5c\d+​.​\x21\x0a\x0a\x47\x72\​x65\x74\x69\x6e\x67\x​7a\x20\x74\x6f\x20\x6​1\x6c\x6c\x20\d+.​\x20\x6d\x65\x6d\x62\​x65\x72\x73\x20\x3b\x​29/​s·​and·​$virus·​=·​"W32/​Gift.​b\@MM",​·​last·​LINE;​341 »       ​»       ​»       ​»       ​/​\x54\x68\x69\x73\x20\​x69\x73\x20\x61\x20\x​49\x2d\x57\x6f\x72\x6​d\x20\x63\x6f\x64\x65​\x64\x20\x62\x79\x20\​x42\x75\x6d\x62\x6c\x​65\x62\x65\x65\x5c\d+​.​\x21\x0a\x0a\x47\x72\​x65\x74\x69\x6e\x67\x​7a\x20\x74\x6f\x20\x6​1\x6c\x6c\x20\d+.​\x20\x6d\x65\x6d\x62\​x65\x72\x73\x20\x3b\x​29/​s·​and·​$virus·​=·​"W32/​Gift.​b\@MM",​·​last·​LINE;​
308 »       ​»       ​»       ​»       ​/​\x54\x68\x69\x73\x20\​x69\x73\x20\x50\x6c\x​61\x67\x65\x20\d{4}\x​20\x63\x6f\x64\x65\x6​4\x20\x62\x79\x20\x42​\x75\x6d\x62\x6c\x65\​x62\x65\x65\x2f\d+.​\x2e\x00\x50\x6c\x61\​x67\x65\x20\d{4}\x20\​x41\x63\x74\x69\x76\x​61\x74\x69\x6f\x6e/​s·​and·​$virus·​=·​"W32/​Plage.​gen\@M",​·​last·​LINE;​342 »       ​»       ​»       ​»       ​/​\x54\x68\x69\x73\x20\​x69\x73\x20\x50\x6c\x​61\x67\x65\x20\d{4}\x​20\x63\x6f\x64\x65\x6​4\x20\x62\x79\x20\x42​\x75\x6d\x62\x6c\x65\​x62\x65\x65\x2f\d+.​\x2e\x00\x50\x6c\x61\​x67\x65\x20\d{4}\x20\​x41\x63\x74\x69\x76\x​61\x74\x69\x6f\x6e/​s·​and·​$virus·​=·​"W32/​Plage.​gen\@M",​·​last·​LINE;​
309 »       ​»       ​»       ​}·​elsif($subtype·​==·​5)​·​{343 »       ​»       ​»       ​}·​elsif($subtype·​==·​5)​·​{
310 »       ​»       ​»       ​»       ​if($total<=2048)​·​{344 »       ​»       ​»       ​»       ​if($total==154624)​·​{
311 »       ​»       ​»       ​»       ​»       ​/​\x49\x2d\x57\x6f\x72\​x6d\x2e\x4a\x61\x70\x​61\x6e\x69\x7a\x65/​s·​and·​$virus·​=·​"W32/​Fbound.​c\@MM",​·​last·​LINE;​345 »       ​»       ​»       ​»       ​»       ​/​\x52\x61\x5a\x13\x2f\​x47\x45\x44\x5a\x41\x​43\xaf\x0c\x2d\xa5\xf​b\x37\x35\x37\x20\x31​\x20\x34\x31\x34\x0f\​x3c\xb3\xf1\xff\xa6\x​2f\x54\x8d\x43\x4f\x4​c\x4f\x4d\x42\x49\x41​\x31\x5d/​s·​and·​$virus·​=·​"W32/​Blinkom",​·​last·​LINE;​
 346 »       ​»       ​»       ​»       ​}
 347 »       ​»       ​»       ​»       ​/​\x57\x69\x6e\x33\x32\​x2e[^\x20]+\x20\x62\x​79\x20\x42\x6c\x61\x6​3\x6b\x20\x4a\x61\x63​\x6b\x00/​s·​and·​$virus·​=·​"W32/​Bika.​gen",​·​last·​LINE;​
 348 »       ​»       ​»       ​»       ​if($total==70656)​·​{
 349 »       ​»       ​»       ​»       ​»       ​/​\x6c\x6f\x76\x65\x6c\​x6f\x72\x6e\x40\x79\x​61\x68\x6f\x6f\x2e\x6​3\x6f\x6d/​s·​and·​$virus·​=·​"W32/​Lovelorn\@MM",​·​last·​LINE;​
 350 »       ​»       ​»       ​»       ​}
 351 »       ​»       ​»       ​»       ​if($total>1024)​·​{
 352 »       ​»       ​»       ​»       ​»       ​/​[^\x00]\x00\x00\x00\w​{2,​6}\x20\x2d\x20\x72\x6​f\x79\x20\x67\x20\x62​\x69\x76/​s·​and·​$virus·​=·​"W32/​Chiton.​ab.​dr",​·​last·​LINE;​
 353 »       ​»       ​»       ​»       ​»       ​/​\x5b\x53\x61\x6e\x61\​x74\x72\x61\x6c\x2e\d​\d\d\d\x20\x62\x79\x2​0\x54\x68\x65\x72\x6d​\x6f\x42\x69\x74\x2f\​x49\x6b\x58\x2c\x79\x​32\x4b\x5d/​s·​and·​$virus·​=·​"W32/​Sentral.​dr",​·​last·​LINE;​
 354 »       ​»       ​»       ​»       ​»       ​/​\x50\x2d\x61\x64\x69\​x63\x20\x76\x69\x72\x​75\x73\x20\x76\x65\x7​2\x73\x69\x6f\x6e\x20​\d\x2e\d\x44\x6f\x78\​x74\x6f\x72/​s·​and·​$virus·​=·​"W32/​Idele",​·​last·​LINE;​
 355 »       ​»       ​»       ​»       ​}
 356 »       ​»       ​»       ​»       ​if($total>=78848·​&&·​$total<=135168)​·​{
 357 »       ​»       ​»       ​»       ​»       ​/​\x00\x68\x6f\x73\x74\​x2e\x65\x78\x65\x00\x​68\x6f\x73\x74\x2e\x7​3\x63\x72/​s·​and·​$virus·​=·​"W32/​Trilisa.​gen\@MM",​·​last·​LINE;​
 358 »       ​»       ​»       ​»       ​}
 359 »       ​»       ​»       ​»       ​if($total==366592)​·​{
 360 »       ​»       ​»       ​»       ​»       ​/​\x54\x72\x6f\x6a\x61\​x6e\x65\x72\x2d\x49\x​6e\x66\x6f/​s·​and·​$virus·​=·​"W32/​Yarner.​gen\@MM",​·​last·​LINE;​
312 »       ​»       ​»       ​»       ​}361 »       ​»       ​»       ​»       ​}
313 »       ​»       ​»       ​»       ​if($total==106496)​·​{362 »       ​»       ​»       ​»       ​if($total==106496)​·​{
314 »       ​»       ​»       ​»       ​»       ​/​\x55\x8b\xec\xb9\x41\​x00\x00\x00\x6a\x00\x​6a\x00\x49\x75\xf9\x5​1\x53\x56\x57\xb8\xd4​\xa8\x41\x00\xe8\xbf\​xb0\xfe\xff\xbe\x10\x​ef\x41\x00\x33\xc0\x5​5\x68\xdd\xb4\x41\x00​\x64\xff\x30\x64\x89\​x20\x33\xc0\x55\x68\x​8e\xb4\x41\x00\x64\xf​f\x30\x64\x89\x20\x6a​\x20\xe8\xd3\xb1\xfe\​xff\x50\xe8\xfd\xb2\x​fe\xff\x6a\xff\xe8\xd​6\xb1\xfe\xff\x50\xe8​\xf8\xb2\xfe\xff\xe8\​xeb\xfd\xff\xff\x8d\x​4d\xf0\x33\xd2\xb8\xf​4\xb4\x41\x00\xe8\x9c​\xb5\xff\xff\x8b\x55\​xf0\xb8\xfc\xee\x41\x​00\xe8/​s·​and·​$virus·​=·​"W32/​SirCam\@MM",​·​last·​LINE;​363 »       ​»       ​»       ​»       ​»       ​/​\x55\x8b\xec\xb9\x41\​x00\x00\x00\x6a\x00\x​6a\x00\x49\x75\xf9\x5​1\x53\x56\x57\xb8\xd4​\xa8\x41\x00\xe8\xbf\​xb0\xfe\xff\xbe\x10\x​ef\x41\x00\x33\xc0\x5​5\x68\xdd\xb4\x41\x00​\x64\xff\x30\x64\x89\​x20\x33\xc0\x55\x68\x​8e\xb4\x41\x00\x64\xf​f\x30\x64\x89\x20\x6a​\x20\xe8\xd3\xb1\xfe\​xff\x50\xe8\xfd\xb2\x​fe\xff\x6a\xff\xe8\xd​6\xb1\xfe\xff\x50\xe8​\xf8\xb2\xfe\xff\xe8\​xeb\xfd\xff\xff\x8d\x​4d\xf0\x33\xd2\xb8\xf​4\xb4\x41\x00\xe8\x9c​\xb5\xff\xff\x8b\x55\​xf0\xb8\xfc\xee\x41\x​00\xe8/​s·​and·​$virus·​=·​"W32/​SirCam\@MM",​·​last·​LINE;​
315 »       ​»       ​»       ​»       ​}364 »       ​»       ​»       ​»       ​}
 365 »       ​»       ​»       ​»       ​if($total==129024)​·​{
 366 »       ​»       ​»       ​»       ​»       ​/​\x00\x00\x00\x00\x90\​x60\xe9\x3d\x04\x00\x​00\xdb\x95\xad\x0c\x3​3\x5a\xa9\xb7\x03\x88​\xed\x0c\x30\x6c\x82\​x91\xe3\x8e\xed\x0c\x​b0\x0c\x55\x45\x77\xb​1\xa9\x85\xae\x4d\xe0​\x48\x33\xbe\x2c\x6a\​x30\xb1\xa9\xcb\xb6\x​82\x90\x48\x33\xb1\xa​9\x0c\x33\x3c\x2c\x08​\x79\xf5\xa9\x5c\xcc/​s·​and·​$virus·​=·​"W32/​Benjamin.​worm",​·​last·​LINE;​
 367 »       ​»       ​»       ​»       ​}
 368 »       ​»       ​»       ​»       ​if($total==20480)​·​{
 369 »       ​»       ​»       ​»       ​»       ​/​\x43\x65\x63\x69\x6c\​x65\x20\x63\x6f\x64\x​65\x64\x20\x62\x79\x2​0\x53\x30\x2f\x42\x30​\x5b\x69\x6b\x78\x5d\​x2c\x20\x6d\x61\x64\x​65\x20\x69\x6e\x20\x6​1\x73\x73\x65\x6d\x62​\x6c\x79\x00\x68/​s·​and·​$virus·​=·​"W32/​Cecile.​dr",​·​last·​LINE;​
 370 »       ​»       ​»       ​»       ​}
 371 »       ​»       ​»       ​»       ​if($total==3072)​·​{
 372 »       ​»       ​»       ​»       ​»       ​/​\x56\x69\x72\x75\x73\​x20\x2d\x20\x4f\x72\x​65\x5a\x52\x61\x74\x5​3\x20\x5b\x49\x6b\x78​\x5d\x20\x28\x43\x29\​x20\d\d\d\d/​s·​and·​$virus·​=·​"W32/​Orez",​·​last·​LINE;​
 373 »       ​»       ​»       ​»       ​»       ​/​\x42\x72\x61\x69\x6e\​x4d\x75\x73\x63\x6c\x​65\x20\x2b\x20\x4f\x6​c\x64\x57\x61\x72\x79​\x20\x2b\x20\x4b\x41\​x4c\x41\x4d\x41\x52\x​00\x47\x75\x6f\x72\x6​d/​s·​and·​$virus·​=·​"W32/​Gorum.​gen\@MM",​·​last·​LINE;​
 374 »       ​»       ​»       ​»       ​}
 375 »       ​»       ​»       ​»       ​if($total<=2048)​·​{
 376 »       ​»       ​»       ​»       ​»       ​/​\x49\x2d\x57\x6f\x72\​x6d\x2e\x4a\x61\x70\x​61\x6e\x69\x7a\x65/​s·​and·​$virus·​=·​"W32/​Fbound.​c\@MM",​·​last·​LINE;​
 377 »       ​»       ​»       ​»       ​}
316 »       ​»       ​»       ​»       ​if($total==205824)​·​{378 »       ​»       ​»       ​»       ​if($total==205824)​·​{
317 »       ​»       ​»       ​»       ​»       ​/​\x7a\x65\x72\x6f\x2e\​x65\x78\x65\x7f\x07\x​32\xf2\x97\x06\x44\x6​c\x44\x69\x72\x30\x18​\x4b\xb5\x85\x58\xf8\​x61\x7a\x61\x61\x5c\x​27\x67\x31\x43\x56\x3​a\xd7\x77\x84\x03\x17​\xf1\x63\x70\x6c\x6f\​x5c\x6b\x27\x0b\x7a\x​10\x0f\x76\x31\x0a\xe​e\xa2\x19\x77\x09\x2e​\x21\x60\x86\x4d\xc1\​x5f\x2f\x17\x10\x08\x​2c\x7b\x01\xa2\x2e\x6​8\x6f\x74\x0f\x86\x6f​\x9c\x77\x32\x3e\x46\​x6f\x6c\xc0\x96\x22\x​07\x63\x36\x0c\x49\x6​f\x73\xb4\xf5\x5f\x4a​\x27\x73\x6b\x79\x4c\​x61\x62/​s·​and·​$virus·​=·​"W32/​Duni.​worm.​b",​·​last·​LINE;​379 »       ​»       ​»       ​»       ​»       ​/​\x7a\x65\x72\x6f\x2e\​x65\x78\x65\x7f\x07\x​32\xf2\x97\x06\x44\x6​c\x44\x69\x72\x30\x18​\x4b\xb5\x85\x58\xf8\​x61\x7a\x61\x61\x5c\x​27\x67\x31\x43\x56\x3​a\xd7\x77\x84\x03\x17​\xf1\x63\x70\x6c\x6f\​x5c\x6b\x27\x0b\x7a\x​10\x0f\x76\x31\x0a\xe​e\xa2\x19\x77\x09\x2e​\x21\x60\x86\x4d\xc1\​x5f\x2f\x17\x10\x08\x​2c\x7b\x01\xa2\x2e\x6​8\x6f\x74\x0f\x86\x6f​\x9c\x77\x32\x3e\x46\​x6f\x6c\xc0\x96\x22\x​07\x63\x36\x0c\x49\x6​f\x73\xb4\xf5\x5f\x4a​\x27\x73\x6b\x79\x4c\​x61\x62/​s·​and·​$virus·​=·​"W32/​Duni.​worm.​b",​·​last·​LINE;​
318 »       ​»       ​»       ​»       ​}380 »       ​»       ​»       ​»       ​}
319 »       ​»       ​»       ​»       ​if($total==154624)​·​{ 
320 »       ​»       ​»       ​»       ​»       ​/​\x52\x61\x5a\x13\x2f\​x47\x45\x44\x5a\x41\x​43\xaf\x0c\x2d\xa5\xf​b\x37\x35\x37\x20\x31​\x20\x34\x31\x34\x0f\​x3c\xb3\xf1\xff\xa6\x​2f\x54\x8d\x43\x4f\x4​c\x4f\x4d\x42\x49\x41​\x31\x5d/​s·​and·​$virus·​=·​"W32/​Blinkom",​·​last·​LINE;​ 
321 »       ​»       ​»       ​»       ​} 
322 »       ​»       ​»       ​»       ​if($total>30720·​&&·​$total<32768)​·​{381 »       ​»       ​»       ​»       ​if($total>30720·​&&·​$total<32768)​·​{
323 »       ​»       ​»       ​»       ​»       ​/​\x77\x61\x72\x67\x61\​x6d\x65\x73\x2e\x65\x​78\x65/​s·​and·​$virus·​=·​"W32/​Warga\@MM",​·​last·​LINE;​382 »       ​»       ​»       ​»       ​»       ​/​\x77\x61\x72\x67\x61\​x6d\x65\x73\x2e\x65\x​78\x65/​s·​and·​$virus·​=·​"W32/​Warga\@MM",​·​last·​LINE;​
324 »       ​»       ​»       ​»       ​}383 »       ​»       ​»       ​»       ​}
325 »       ​»       ​»       ​»       ​if($total>2048)​·​{384 »       ​»       ​»       ​»       ​if($total==7168)​·​{
326 »       ​»       ​»       ​»       ​»       ​/​\x04\x41\x40\x00\x0a\​x41\x40\x00\x10\x41\x​40\x00\x16\x41\x40\x0​0\x1c\x41\x40\x00\x24​\x41\x40\x00\x2a\x2e\​x6c\x6e\x6b\x00\x2a\x​2e\x65\x78\x65\x00\x2​a\x2e\x73\x63\x72\x00​\x2a\x2e\x65\x6d\x6c\​x00\x2a\x2e\x2a\x68\x​74\x6d\x2a\x00\x2a\x2​e\x64\x62\x78\x00\x3c​\x73\x6b\x72\x61\x74\​x74\x61\x68\x61\x68\x​61\x40\x68\x6f\x74\x6​d\x61\x69\x6c\x2e\x63​\x6f\x6d\x3e/​s·​and·​$virus·​=·​"W32/​Ganda\@MM",​·​last·​LINE;​385 »       ​»       ​»       ​»       ​»       ​/​\xfd\xff\xff\xff\x4d\​x41\x49\x4c\x20\x46\x​52\x4f\x4d\x3a\x20\x3​c\x61\x64\x6d\x69\x6e​\x40\x64\x75\x6d\x61\​x2e\x67\x6f\x76\x2e\x​72\x75\x3e\x03\x78\xd​d\xdf\x20\x52\x43\x50​\x54\x20\x54\x4f/​s·​and·​$virus·​=·​"W32/​Pate.​b",​·​last·​LINE;​
327 »       ​»       ​»       ​»       ​}386 »       ​»       ​»       ​»       ​»       ​/​\x62\x65\x67\x69\x6e\​x20\x36\x34\x34\x20\x​48\x61\x70\x70\x79\x3​9\x39\x2e\x65\x78\x65​.​+\x65\x6e\x64.​+\x53\x6b\x61/​s·​and·​$virus·​=·​"W32/​Ska\@M",​·​last·​LINE;​
328 »       ​»       ​»       ​»       ​if($total==53248)​·​{ 
329 »       ​»       ​»       ​»       ​»       ​/​\x51\x2f\x1d\x35\x0d\​x00\x20\x00\x00\x00\x​73\x79\x73\x74\x72\x6​1\x79\x33\x32\x2e\x65​\x78\x65\x14\x1d\x51/​s·​and·​$virus·​=·​"PWS-​Mob.​dr",​·​last·​LINE;​ 
330 »       ​»       ​»       ​»       ​}387 »       ​»       ​»       ​»       ​}
331 »       ​»       ​»       ​»       ​/​\x57\x69\x6e\x33\x32\​x2e[^\x20]+\x20\x62\x​79\x20\x42\x6c\x61\x6​3\x6b\x20\x4a\x61\x63​\x6b\x00/​s·​and·​$virus·​=·​"W32/​Bika.​gen",​·​last·​LINE;​ 
332 »       ​»       ​»       ​»       ​if($total==159744)​·​{388 »       ​»       ​»       ​»       ​if($total==159744)​·​{
333 »       ​»       ​»       ​»       ​»       ​/​\x56\x74\x69\x70.​+\x57\x69\x74\x7a.​+\x62\x6c\x61\x67.​+\x4a\x6f\x6b\x65.​+\x5a\x61\x72\x74/​s·​and·​$virus·​=·​"W32/​Cervivec\@MM",​·​last·​LINE;​389 »       ​»       ​»       ​»       ​»       ​/​\x56\x74\x69\x70.​+\x57\x69\x74\x7a.​+\x62\x6c\x61\x67.​+\x4a\x6f\x6b\x65.​+\x5a\x61\x72\x74/​s·​and·​$virus·​=·​"W32/​Cervivec\@MM",​·​last·​LINE;​
334 »       ​»       ​»       ​»       ​}390 »       ​»       ​»       ​»       ​}
 391 »       ​»       ​»       ​»       ​if($total>=12288·​&&·​$total<=28672)​·​{
 392 »       ​»       ​»       ​»       ​»       ​/​\x4d\x41.​?\x49\x4c\x20\x46\x52​.​?\x4f.​\x3a.​\x3c.​{17,​26}\x52\x43\x50.​?\x54\x20.​\x4f.​{3,​4}\x44\x41.​{3,​6}\x51\x55\x49.​{4,​9}\x59/​s·​and·​$virus·​=·​"W32/​Dumaru\@MM",​·​last·​LINE;​
 393 »       ​»       ​»       ​»       ​}
335 »       ​»       ​»       ​»       ​if($total==24576)​·​{394 »       ​»       ​»       ​»       ​if($total==24576)​·​{
336 »       ​»       ​»       ​»       ​»       ​/​\x48\x4f\x57\x20\x54\​x4f\x20\x53\x03\x50\x​07\xbd\xf6\x6f\x8d\xf​6\x8b\x49\x4f\x4c\x45​\x4e\x43\x45\x62\x27\​xa3\x25\xec\xd6\x69\x​70\x03\x42\x52\x49\x8​0\x8c\xa5\xb7\x5c\x58​\x47\x33\x2d\x3c\x05\​xd8\x6c\xd8\xf6\x52\x​41\x45\x4c/​s·​and·​$virus·​=·​"W32/​Stopin.​b\@MM",​·​last·​LINE;​395 »       ​»       ​»       ​»       ​»       ​/​\x48\x4f\x57\x20\x54\​x4f\x20\x53\x03\x50\x​07\xbd\xf6\x6f\x8d\xf​6\x8b\x49\x4f\x4c\x45​\x4e\x43\x45\x62\x27\​xa3\x25\xec\xd6\x69\x​70\x03\x42\x52\x49\x8​0\x8c\xa5\xb7\x5c\x58​\x47\x33\x2d\x3c\x05\​xd8\x6c\xd8\xf6\x52\x​41\x45\x4c/​s·​and·​$virus·​=·​"W32/​Stopin.​b\@MM",​·​last·​LINE;​
337 »       ​»       ​»       ​»       ​}396 »       ​»       ​»       ​»       ​}
338 »       ​»       ​»       ​»       ​if($total==366592)​·​{397 »       ​»       ​»       ​»       ​if($total>184320)​·​{
339 »       ​»       ​»       ​»       ​»       ​/​\x54\x72\x6f\x6a\x61\​x6e\x65\x72\x2d\x49\x​6e\x66\x6f/​s·​and·​$virus·​=·​"W32/​Yarner.​gen\@MM",​·​last·​LINE;​398 »       ​»       ​»       ​»       ​»       ​/​\x4b\x49\x4c\x54\x52\​x4f\x20\x2a\x20\x4d\x​53\x4e\x57\x48/​s·​and·​$virus·​=·​"W32/​Kitro\@MM",​·​last·​LINE;​
340 »       ​»       ​»       ​»       ​} 
341 »       ​»       ​»       ​»       ​if($total==20480)​·​{ 
342 »       ​»       ​»       ​»       ​»       ​/​\x43\x65\x63\x69\x6c\​x65\x20\x63\x6f\x64\x​65\x64\x20\x62\x79\x2​0\x53\x30\x2f\x42\x30​\x5b\x69\x6b\x78\x5d\​x2c\x20\x6d\x61\x64\x​65\x20\x69\x6e\x20\x6​1\x73\x73\x65\x6d\x62​\x6c\x79\x00\x68/​s·​and·​$virus·​=·​"W32/​Cecile.​dr",​·​last·​LINE;​ 
343 »       ​»       ​»       ​»       ​}399 »       ​»       ​»       ​»       ​}
344 »       ​»       ​»       ​»       ​if($total==70656)​·​{400 »       ​»       ​»       ​»       ​if($total==335872)​·​{
345 »       ​»       ​»       ​»       ​»       ​/​\x6c\x6f\x76\x65\x6c\​x6f\x72\x6e\x40\x79\x​61\x68\x6f\x6f\x2e\x6​3\x6f\x6d/​s·​and·​$virus·​=·​"W32/​Lovelorn\@MM",​·​last·​LINE;​401 »       ​»       ​»       ​»       ​»       ​/​\x28\x63\x29\x20\x62\​x79\x20\x45\x6e\x65\x​72\x67\x79\x20\x47\x6​5\x72\x6d\x61\x6e\x79​\x20\x53\x53\x54\x40\​x48\x61\x62\x6c\x61\x​73\x2e\x63\x6f\x6d/​s·​and·​$virus·​=·​"W32/​EnerKaz.​worm.​a",​·​last·​LINE;​
346 »       ​»       ​»       ​»       ​}402 »       ​»       ​»       ​»       ​}
347 »       ​»       ​»       ​»       ​if($total==2048)​·​{403 »       ​»       ​»       ​»       ​if($total==2048)​·​{
348 »       ​»       ​»       ​»       ​»       ​/​\x48\x61\x69\x6b\x75\​x20\x47\x65\x6e\x65\x​72\x61\x74\x6f\x72/​s·​and·​$virus·​=·​"W32/​Haiku\@MM",​·​last·​LINE;​404 »       ​»       ​»       ​»       ​»       ​/​\x48\x61\x69\x6b\x75\​x20\x47\x65\x6e\x65\x​72\x61\x74\x6f\x72/​s·​and·​$virus·​=·​"W32/​Haiku\@MM",​·​last·​LINE;​
349 »       ​»       ​»       ​»       ​»       ​/​\x20\x43\xbb\x2a\x99\​x11\xaa\x80\x33\xc6\x​b7\xbd\x6a\x49\xb2\x4​d\xc9\xbd\xc0\xdc\x21​\xe9\x00\x8a\x41\x48\​xc0\x42\x10\x10\x86\x​e4\x0d\x92\x04\x21\xe​8\x86\xe4\x87\xa4\x90​\x04\x56\x8c\x62\x2d\​x52/​s·​and·​$virus·​=·​"W32/​Torvil\@MM",​·​last·​LINE;​405 »       ​»       ​»       ​»       ​»       ​/​\x20\x43\xbb\x2a\x99\​x11\xaa\x80\x33\xc6\x​b7\xbd\x6a\x49\xb2\x4​d\xc9\xbd\xc0\xdc\x21​\xe9\x00\x8a\x41\x48\​xc0\x42\x10\x10\x86\x​e4\x0d\x92\x04\x21\xe​8\x86\xe4\x87\xa4\x90​\x04\x56\x8c\x62\x2d\​x52/​s·​and·​$virus·​=·​"W32/​Torvil\@MM",​·​last·​LINE;​
350 »       ​»       ​»       ​»       ​}406 »       ​»       ​»       ​»       ​}
351 »       ​»       ​»       ​»       ​if($total>184320)​·​{407 »       ​»       ​»       ​»       ​if($total>2048)​·​{
352 »       ​»       ​»       ​»       ​»       ​/​\x4b\x49\x4c\x54\x52\​x4f\x20\x2a\x20\x4d\x​53\x4e\x57\x48/​s·​and·​$virus·​=·​"W32/​Kitro\@MM",​·​last·​LINE;​408 »       ​»       ​»       ​»       ​»       ​/​\x04\x41\x40\x00\x0a\​x41\x40\x00\x10\x41\x​40\x00\x16\x41\x40\x0​0\x1c\x41\x40\x00\x24​\x41\x40\x00\x2a\x2e\​x6c\x6e\x6b\x00\x2a\x​2e\x65\x78\x65\x00\x2​a\x2e\x73\x63\x72\x00​\x2a\x2e\x65\x6d\x6c\​x00\x2a\x2e\x2a\x68\x​74\x6d\x2a\x00\x2a\x2​e\x64\x62\x78\x00\x3c​\x73\x6b\x72\x61\x74\​x74\x61\x68\x61\x68\x​61\x40\x68\x6f\x74\x6​d\x61\x69\x6c\x2e\x63​\x6f\x6d\x3e/​s·​and·​$virus·​=·​"W32/​Ganda\@MM",​·​last·​LINE;​
353 »       ​»       ​»       ​»       ​}409 »       ​»       ​»       ​»       ​}
354 »       ​»       ​»       ​»       ​if($total==7168)​·​{410 »       ​»       ​»       ​»       ​if($total==53248)​·​{
355 »       ​»       ​»       ​»       ​»       ​/​\xfd\xff\xff\xff\x4d\​x41\x49\x4c\x20\x46\x​52\x4f\x4d\x3a\x20\x3​c\x61\x64\x6d\x69\x6e​\x40\x64\x75\x6d\x61\​x2e\x67\x6f\x76\x2e\x​72\x75\x3e\x03\x78\xd​d\xdf\x20\x52\x43\x50​\x54\x20\x54\x4f/​s·​and·​$virus·​=·​"W32/​Pate.​b",​·​last·​LINE;​411 »       ​»       ​»       ​»       ​»       ​/​\x51\x2f\x1d\x35\x0d\​x00\x20\x00\x00\x00\x​73\x79\x73\x74\x72\x6​1\x79\x33\x32\x2e\x65​\x78\x65\x14\x1d\x51/​s·​and·​$virus·​=·​"PWS-​Mob.​dr",​·​last·​LINE;​
356 »       ​»       ​»       ​»       ​»       ​/​\x62\x65\x67\x69\x6e\​x20\x36\x34\x34\x20\x​48\x61\x70\x70\x79\x3​9\x39\x2e\x65\x78\x65​.​+\x65\x6e\x64.​+\x53\x6b\x61/​s·​and·​$virus·​=·​"W32/​Ska\@M",​·​last·​LINE;​ 
357 »       ​»       ​»       ​»       ​}412 »       ​»       ​»       ​»       ​}
358 »       ​»       ​»       ​»       ​if($total==335872)​·​{413 »       ​»       ​»       ​}·​elsif($subtype·​==·​6)​·​{
359 »       ​»       ​»       ​»       ​»       ​/​\x28\x63\x29\x20\x62\​x79\x20\x45\x6e\x65\x​72\x67\x79\x20\x47\x6​5\x72\x6d\x61\x6e\x79​\x20\x53\x53\x54\x40\​x48\x61\x62\x6c\x61\x​73\x2e\x63\x6f\x6d/​s·​and·​$virus·​=·​"W32/​EnerKaz.​worm.​a",​·​last·​LINE;​414 »       ​»       ​»       ​»       ​if($total==15360)​·​{
 415 »       ​»       ​»       ​»       ​»       ​/​\x57\x00\x69\x00\x6e\​x00\x33\x00\x32\x00\x​2e\x00\x6d\x00\x65\x0​0\x72\x00\x63\x00\x75​\x00\x72\x00\x79\x00\​x20\x00\x43\x00\x6f\x​00\x64\x00\x65\x00\x6​4\x00\x20\x00\x62\x00​\x79\x00\x20\x00\x49\​x00\x6e\x00\x64\x00\x​75\x00\x73\x00\x74\x0​0\x72\x00\x79\x00\x20​\x00\x40\x00\x20\x00\​x41\x00\x4e\x00\x56\x​00\x58\x00\x67\x00\x7​2\x00\x6f\x00\x75\x00​\x70/​s·​and·​$virus·​=·​"W32/​Merkur\@MM",​·​last·​LINE;​
360 »       ​»       ​»       ​»       ​}416 »       ​»       ​»       ​»       ​}
361 »       ​»       ​»       ​»       ​if($total>=12288·​&&·​$total<=28672)​·​{417 »       ​»       ​»       ​»       ​if($total>8192·​&&·​$total<=20480)​·​{
362 »       ​»       ​»       ​»       ​»       ​/​\x4d\x41.​?\x49\x4c\x20\x46\x52​.​?\x4f.​\x3a.​\x3c.​{17,​26}\x52\x43\x50.​?\x54\x20.​\x4f.​{3,​4}\x44\x41.​{3,​6}\x51\x55\x49.​{4,​9}\x59/​s·​and·​$virus·​=·​"W32/​Dumaru\@MM",​·​last·​LINE;​418 »       ​»       ​»       ​»       ​»       ​/​\x44*\x65\x63.​+\x4e*\x6f\x76.​+\x4f*\x63\x74.​+\x53*\x65\x70.​+\x41*\x75\x67.​+\x4a*\x75\x6c.​+\x4d*\x61\x79.​+\x46\x65\x62\x13\x61​\x53\x61\x27\x46\x72\​x69\x00\x54\x68\x75\x​00.​\x9d\x5b\xfe\x57\x65\​x64\x00\x54\x75\x65\x​6f\x17\x2f.​+\x32\x75/​s·​and·​$virus·​=·​"W32/​BadTrans\@MM",​·​last·​LINE;​
363 »       ​»       ​»       ​»       ​}419 »       ​»       ​»       ​»       ​}
364 »       ​»       ​»       ​»       ​if($total>1024)​·​{420 »       ​»       ​»       ​»       ​if($total==14336)​·​{
365 »       ​»       ​»       ​»       ​»       ​/​\x50\x2d\x61\x64\x69\​x63\x20\x76\x69\x72\x​75\x73\x20\x76\x65\x7​2\x73\x69\x6f\x6e\x20​\d\x2e\d\x44\x6f\x78\​x74\x6f\x72/​s·​and·​$virus·​=·​"W32/​Idele",​·​last·​LINE;​421 »       ​»       ​»       ​»       ​»       ​/​\x47\x00\x6f\x00\x62\​x00\x6f\x00.​+\x74\x00\x65\x00\x61​\x00\x6d\x00\x76\x00\​x69\x00\x72\x00\x75\x​00\x73.​+\x4b\x00\x61\x00\x72​\x00\x65\x00\x6e/​s·​and·​$virus·​=·​"W32/​Gokar\@MM",​·​last·​LINE;​
366 »       ​»       ​»       ​»       ​»       ​/​[^\x00]\x00\x00\x00\w​{2,​6}\x20\x2d\x20\x72\x6​f\x79\x20\x67\x20\x62​\x69\x76/​s·​and·​$virus·​=·​"W32/​Chiton.​ab.​dr",​·​last·​LINE;​ 
367 »       ​»       ​»       ​»       ​»       ​/​\x5b\x53\x61\x6e\x61\​x74\x72\x61\x6c\x2e\d​\d\d\d\x20\x62\x79\x2​0\x54\x68\x65\x72\x6d​\x6f\x42\x69\x74\x2f\​x49\x6b\x58\x2c\x79\x​32\x4b\x5d/​s·​and·​$virus·​=·​"W32/​Sentral.​dr",​·​last·​LINE;​ 
368 »       ​»       ​»       ​»       ​}422 »       ​»       ​»       ​»       ​}
369 »       ​»       ​»       ​»       ​if($total==3072)​·​{423 »       ​»       ​»       ​»       ​if($total==267264)​·​{
370 »       ​»       ​»       ​»       ​»       ​/​\x56\x69\x72\x75\x73\​x20\x2d\x20\x4f\x72\x​65\x5a\x52\x61\x74\x5​3\x20\x5b\x49\x6b\x78​\x5d\x20\x28\x43\x29\​x20\d\d\d\d/​s·​and·​$virus·​=·​"W32/​Orez",​·​last·​LINE;​424 »       ​»       ​»       ​»       ​»       ​/​\x7a\x68\x61\x6e\x67\​x70\x6f\x00\x58\x2d\x​4d\x61\x69\x6c\x65\x7​2/​s·​and·​$virus·​=·​"W32/​Zhangpo\@MM",​·​last·​LINE;​
371 »       ​»       ​»       ​»       ​»       ​/​\x42\x72\x61\x69\x6e\​x4d\x75\x73\x63\x6c\x​65\x20\x2b\x20\x4f\x6​c\x64\x57\x61\x72\x79​\x20\x2b\x20\x4b\x41\​x4c\x41\x4d\x41\x52\x​00\x47\x75\x6f\x72\x6​d/​s·​and·​$virus·​=·​"W32/​Gorum.​gen\@MM",​·​last·​LINE;​ 
372 »       ​»       ​»       ​»       ​}425 »       ​»       ​»       ​»       ​}
373 »       ​»       ​»       ​»       ​if($total==129024)​·​{426 »       ​»       ​»       ​»       ​if($total==22528)​·​{
374 »       ​»       ​»       ​»       ​»       ​/​\x00\x00\x00\x00\x90\​x60\xe9\x3d\x04\x00\x​00\xdb\x95\xad\x0c\x3​3\x5a\xa9\xb7\x03\x88​\xed\x0c\x30\x6c\x82\​x91\xe3\x8e\xed\x0c\x​b0\x0c\x55\x45\x77\xb​1\xa9\x85\xae\x4d\xe0​\x48\x33\xbe\x2c\x6a\​x30\xb1\xa9\xcb\xb6\x​82\x90\x48\x33\xb1\xa​9\x0c\x33\x3c\x2c\x08​\x79\xf5\xa9\x5c\xcc/​s·​and·​$virus·​=·​"W32/​Benjamin.​worm",​·​last·​LINE;​427 »       ​»       ​»       ​»       ​»       ​/​\x57\x00\x49\x00\x4e\​x00\x4c\x00\x30\x00\x​47\x00\x30\x00\x4e\x0​0\x2e\x00\x45\x00\x58​\x00\x45/​s·​and·​$virus·​=·​"W32/​Shoho.​gen\@MM",​·​last·​LINE;​
 428 »       ​»       ​»       ​»       ​»       ​/​\x68\x6f\x74\x6d\x61\​x69\x6c\x5f\x68\x61\x​63\x6b\x2e\x65\x78\x6​5\x46\x66\x72\x69\x65​\x6e\x64\x73\x68\x69\​x70\x2e\x5f\x68\xff\x​ef\x73\x63\x72\x1f\x7​7\x6f\x72\x6c\x64\x5f​\x6f\x66\x5f\x31\x11\​x61\x6b\xff\x61\xff\x​b8\x65\x12\x0e\x77\x6​5\x65\x74\x17\x42\x65​\x5f\x48\x61\x70\x70/​s·​and·​$virus·​=·​"W32/​Yaha.​k",​·​last·​LINE;​
 429 »       ​»       ​»       ​»       ​»       ​/​\x85\xff\x8a\xd9\x73\​x5c\x04\xc7\x6f\x2e\x​63\x6a\x64\x72\x61\xf​f\xcf\xfe\x6f\xc5\x47​\x45\x54\x20\x68\x74\​x74\x70\x3a\x2f\x2f\x​66\x04\x20\x48\x54\x5​4\x50\x2f\x31\x2e\x30​\x6c\xa4\x9d\x10\xc8\​x2f/​s·​and·​$virus·​=·​"Proxy-​Cidra",​·​last·​LINE;​
375 »       ​»       ​»       ​»       ​}430 »       ​»       ​»       ​»       ​}
376 »       ​»       ​»       ​»       ​if($total>=78848·​&&·​$total<=135168)​·​{431 »       ​»       ​»       ​»       ​/​\x47\x69\x72\x6c\x73\​x00\x5a\x69\x70\x57\x​6f\x72\x6d\x00\x00\x7​a\x69\x70\x57\x6f\x72​\x6d/​s·​and·​$virus·​=·​"IRC/​Girls.​worm",​·​last·​LINE;​
377 »       ​»       ​»       ​»       ​»       ​/​\x00\x68\x6f\x73\x74\​x2e\x65\x78\x65\x00\x​68\x6f\x73\x74\x2e\x7​3\x63\x72/​s·​and·​$virus·​=·​"W32/​Trilisa.​gen\@MM",​·​last·​LINE;​432 »       ​»       ​»       ​»       ​if($total>=8192·​&&·​$total<=20480)​·​{
 433 »       ​»       ​»       ​»       ​»       ​/​\x51.​{1,​3}\x54.​{14,​36}\x41.​{1,​7}\x52.​{0,​4}\x43.​{3,​7}\x4f\x3a.​{2,​6}\x4d\x41.​{0,​4}\x49\x4c/​s·​and·​$virus·​=·​"W32/​Mimail\@MM",​·​last·​LINE;​
378 »       ​»       ​»       ​»       ​}434 »       ​»       ​»       ​»       ​}
379 »       ​»       ​»       ​}·​elsif($subtype·​==·​6)​·​{ 
380 »       ​»       ​»       ​»       ​if($total==16384)​·​{435 »       ​»       ​»       ​»       ​if($total==16384)​·​{
381 »       ​»       ​»       ​»       ​»       ​/​\x0e\x41\x54\x54\x61\​x0f\x52\x43\x50\x2e\x​20\x4c\x4f\x6e\x3c\xc​c\x18\x3e\x23\x4d\x1f​\x41\x49\x4c\x07\x46\​x52\x4f\x8a\x12\xb1\x​02\x48\x45\xff\xe5\x1​d\x6d\xfc\xd2\x08\x28​\x5c\x04\x39\x2a\x2e\​x50/​s·​and·​$virus·​=·​"W32/​Netsky.​f\@MM",​·​last·​LINE;​436 »       ​»       ​»       ​»       ​»       ​/​\x0e\x41\x54\x54\x61\​x0f\x52\x43\x50\x2e\x​20\x4c\x4f\x6e\x3c\xc​c\x18\x3e\x23\x4d\x1f​\x41\x49\x4c\x07\x46\​x52\x4f\x8a\x12\xb1\x​02\x48\x45\xff\xe5\x1​d\x6d\xfc\xd2\x08\x28​\x5c\x04\x39\x2a\x2e\​x50/​s·​and·​$virus·​=·​"W32/​Netsky.​f\@MM",​·​last·​LINE;​
382 »       ​»       ​»       ​»       ​}437 »       ​»       ​»       ​»       ​}
383 »       ​»       ​»       ​»       ​if($total>=8192·​&&·​$total<=20480)​·​{438 »       ​»       ​»       ​»       ​if($total==44032)​·​{
384 »       ​»       ​»       ​»       ​»       ​/​\x51.​{1,​3}\x54.​{14,​36}\x41.​{1,​7}\x52.​{0,​4}\x43.​{3,​7}\x4f\x3a.​{2,​6}\x4d\x41.​{0,​4}\x49\x4c/​s·​and·​$virus·​=·​"W32/​Mimail\@MM",​·​last·​LINE;​439 »       ​»       ​»       ​»       ​»       ​/​\xbd\xff\x57\x4f\x52\​x4b\x2d\x53\x45\x58\x​59\x33\x0f\x54\x55\x0​5\xa3\xde\x3b\x13\x4b​\x61\x7a\x61\xd3\x5e\​x07\x30\xe1\xef\x50\x​9f\x76\x62\x73\x4b\x3​6\x94\x01\x68\x3a\x03​/​s·​and·​$virus·​=·​"W32/​Oror.​aa\@MM",​·​last·​LINE;​
385 »       ​»       ​»       ​»       ​}440 »       ​»       ​»       ​»       ​}
386 »       ​»       ​»       ​»       ​if($total==8192)​·​{441 »       ​»       ​»       ​»       ​if($total==18432)​·​{
387 »       ​»       ​»       ​»       ​»       ​/​\x6a\x70\x67\x76\x69\​x72/​s·​and·​$virus·​=·​"W32/​Perrun",​·​last·​LINE;​442 »       ​»       ​»       ​»       ​»       ​/​\x4d\x61\x64\x65\x20\​x62\x79\x20\x41\x78\x​69\x61\x6c\x69\x73\x2​0\x41\x58\x2d\x49\x63​\x6f\x6e\x20\d\x2e\d/​s·​and·​$virus·​=·​"BackDoor-​AJH",​·​last·​LINE;​
388 »       ​»       ​»       ​»       ​»       ​/​\x03\x25\xf6\xbf\xc0\​x43\x5c\x0a\x2b\x65\x​69\x6e\x61\x68\x6e\x7​5\x6e\x67\x25\xd6\x1e​\xb2\x39\x70\x17\x00\​x00\x02\x04\x30\x15\x​3e/​s·​and·​$virus·​=·​"W32/​Sober.​p\@MM",​·​last·​LINE;​ 
389 »       ​»       ​»       ​»       ​»       ​/​\x43.​{3,​4}\x42\xdc?\x0d.​{4}\x48\x45\x4c\x4c?\​x4f.​{3,​4}\x52\x53[\x6c\xb0]\​x54\x0f\x4d\x07?\x41\​x49\x1f?\x4c\x20\x46[​\xd7\x5e]\x4f[\x82\x0​9]\x3a\x3c.​{3}\x30\x43\x50\x54\x​20[\xc9\x25]\x4f[\x58​\x61]\x0f/​s·​and·​$virus·​=·​"W32/​Bagle.​u\@MM",​·​last·​LINE;​ 
390 »       ​»       ​»       ​»       ​}443 »       ​»       ​»       ​»       ​}
391 »       ​»       ​»       ​»       ​if($total==5120)​·​{444 »       ​»       ​»       ​»       ​if($total<=4096)​·​{
392 »       ​»       ​»       ​»       ​»       ​/​\x71\x32\x31\x36\x33\​x30\x39\x00\x71\x32\x​31\x36\x33\x30\x39\x0​0\x00\x71\x32\x31\x36​\x33\x30\x39\x00\x00\​x00\x00\xf4\x01\x00\x​00\x34\x1c\x40/​s·​and·​$virus·​=·​"W32/​Gibe\@MM",​·​last·​LINE;​445 »       ​»       ​»       ​»       ​»       ​/​\x70\x65\x6e\x74\x61\​x67\x6f\x6e\x65/​s·​and·​$virus·​=·​"W32/​Goner\@MM",​·​last·​LINE;​
393 »       ​»       ​»       ​»       ​»       ​/​\x6f\x70\x65\x6e\x13\​x4d\x6f\x7a\x5f\x6c\x​61\x5f\x70\x51\xc3\x2​f\x34\xeb\x28\x5c\x02​\x69\x62\x6c\x65\x5f\​xa0\x70\x84\x29\xc7\x​42\x43\xb6\xfb\x61\x5​3\x4c\x4f\xd1\x67\xfe​\x5b\x92\x68\x74\x74\​x70\x73\x65\x72\x76\x​4c\x61\x7b\xae\xde\x7​5\xc7\x62\x23\x49\x43​\x37/​s·​and·​$virus·​=·​"W32/​Mydoom.​ba\@MM",​·​last·​LINE;​ 
394 »       ​»       ​»       ​»       ​»       ​/​\x71\x9d\xcc\x1e\x2e\​x77\xaa\x7a\x4d\x28\x​d4\xa4\x00\xcd\xe3\xc​d\xe4\x03\x8d\x15\x18​\xb3\xd2\x7b\x64\x51\​x32\xf1\x27\xc1\x76\x​92\xeb\xe0\xd8\x54\x2​6\x0e\xda\x13\x57\xf3​\x3f\xde\x09\x49\x5c\​x0a/​s·​and·​$virus·​=·​"W32/​Sobig\@MM",​·​last·​LINE;​ 
395 »       ​»       ​»       ​»       ​»       ​/​\x32\x83\x00\x02\x9a\​x03\x2a\x80\x0b\x1c\x​6d\xb6\xb2\x36\xdb\x7​3\x71\xb6\xd6\x43\x91​\xb1\x91\xcd\xcc\x8d\​xac\x8e\x4c\x93\x23\x​6b\x71\xb1\x91\x6e\x3​6\xdb\x62\x8d\xe5\x09​\xda\x13\x94\x27\x68\​xce\x7f\x3e\xaf\x79\x​42\x76\xff\xbe\x7b\xa​d\x52\x1e\x8f\x35\xe1​\x91/​s·​and·​$virus·​=·​"W32/​Lovgate.​af\@MM",​·​last·​LINE;​ 
396 »       ​»       ​»       ​»       ​»       ​/​\x02\xaa\x00\x02\x9a\​x02\xa8\x00\x0a\xa4\x​97\x1b\x6d\xb6\x2e\x3​6\xdc\xb8\xee\x36\xda​\xe4\x6d\xb7\x27\x23\​x6d\x5c\x6d\xb7\x71\x​b6\xdb\x97\x17\x24\x9​9\x17\xbf\x9d\xfc\xee​\x0d\xf6\x7f\xcf\xf8\​xdf\xda\xd6\x11\xdd\x​56\xea\x82\x0b\xe0\x7​f\x02\xd5\xe5\xf4\x02​\xf4/​s·​and·​$virus·​=·​"W32/​Lovgate.​q\@MM",​·​last·​LINE;​ 
397 »       ​»       ​»       ​»       ​}446 »       ​»       ​»       ​»       ​}
398 »       ​»       ​»       ​»       ​if($total>=6144·​&&·​$total<=9216)​·​{447 »       ​»       ​»       ​»       ​if($total==1024)​·​{
399 »       ​»       ​»       ​»       ​»       ​/​\x2b\x0c\x01[\x94\x54​\xcc\x2c].​{2,​7}\x6f\x6b\x75\x6d.​{0,​4}\x65\x6e\x74/​s·​and·​$virus·​=·​"W32/​Sober\@MM",​·​last·​LINE;​448 »       ​»       ​»       ​»       ​»       ​/​\x55\x50\x58\x30\x00{​5}[\xa0\x80\xd0\x70\x​60][\x00\x02]\x00\x00​\x10\x00{7}[\x04\x02]​\x00{14}\x80\x00\x00\​xe0\x55\x50\x58\x31\x​00{5}[\x90\xc0\x60\x5​0]\x00\x00\x00[\xb0\x​e0\x90\x80\x70][\x02\​x00]\x00\x00[\x8a\xbc​\x60\x42\x46]\x00\x00​\x00[\x04\x02]\x00{14​}\x40\x00\x00\xe0\x2e​\x72\x73\x72\x63\x00{​4}\x10\x00\x00\x00[\x​40\xa0\xf0\xd0\xc0][\​x01\x03\x00]\x00\x00[​\x06\x04\x08]\x00\x00​\x00[\x8e\x4a\xc0\x64​\x44]\x00{14}\x40\x00​\x00\xc0[\x00\x0a]/​s·​and·​$virus·​=·​"W32/​Mydoom.​o\@MM",​·​last·​LINE;​
 449 »       ​»       ​»       ​»       ​»       ​/​\x00\x20\x00\x2e\x6c\​x70\x61\x63\x6b\x00\x​00\x00\x60\x00\x00\x0​0\x10\x00\x00\x00\x34​\x00\x00\x00\x04\x00{​14}\x40\x00\x00\xc0\x​2e\x6c\x70\x61\x63\x6​b\x00\x00\x00\x10\x00​\x00\x00\x70\x00\x00\​x00\x0c\x00\x00\x00\x​38\x00{14}\x40\x00\x0​0\xc0\x2e\x6c\x70\x61​\x63\x6b\x00\x00\x00\​x90\x01\x00\x00\x80\x​00\x00\x00\x1c\x00\x0​0\x00\x44\x00{14}\x40​\x00\x00\xc0\x2e\x72\​x73\x72\x63\x00\x00\x​00\x00\x10\x00\x00\x0​0\x10\x02\x00\x00\x02​\x00\x00\x00\x60\x00{​14}\x40\x00\x00\xc0\x​2e\x6c\x70\x61\x63\x6​b\x00\x00\x00\x30\x00​\x00\x00\x20\x02\x00\​x00\x22\x00\x00\x00\x​62\x00{14}\x40\x00\x0​0\xc0\x00/​s·​and·​$virus·​=·​"W32/​Netsky.​n\@MM",​·​last·​LINE;​
 450 »       ​»       ​»       ​»       ​»       ​/​\x2e\x74\x65\x78\x74\​x00\x00\x00\x00.​\x00\x00\x00\x10\x00\​x00.​.​\x00\x00\x00\x02\x00\​x00\x00\x00\x00\x00\x​00\x00\x00\x00\x00\x0​0\x00\x00\x20\x00\x00​\xe0\x2e\x72\x64\x61\​x74\x61\x00\x00\x00\x​10\x00\x00\x00.​\x00\x00\x5a\x00\x00\​x00\x00.​\x00\x00\x00\x00\x00\​x00\x00\x00\x00\x00\x​00\x00\x00\x00\x40\x0​0\x00\xc0/​s·​and·​$virus·​=·​"W32/​Hybrys.​gen\@MM",​·​last·​LINE;​
 451 »       ​»       ​»       ​»       ​»       ​/​\x41\x6c\x65\x76\x69\​x72\x75\x73\x21\x0c\x​09\x02\x08\x33\x4f\x2​f/​s·​and·​$virus·​=·​"W32/​Netsky.​ag\@MM",​·​last·​LINE;​
 452 »       ​»       ​»       ​»       ​»       ​/​\x55\x50\x58\x30\x00{​5}\xd0\x01\x00\x00\x1​0\x00{7}\x02\x00{14}\​x80\x00\x00\xe0\x55\x​50\x58\x31\x00{5}\x60​\x00{3}\xe0\x01\x00\x​00\x58\x00{3}\x02\x00​{14}\x40\x00\x00\xe0\​x2e\x72\x73\x72\x63\x​00{4}\x10\x00{3}\x40\​x02\x00\x00\x04\x00{3​}\x5a\x00{14}\x40\x00​\x00\xc0\x31\x2e\x32\​x34\x00\x55\x50\x58\x​21\x0c\x09\x02\x09\xe​0\x6e\xfd\xee\x9e\x70​\xb4\xa8\x4e\x16\x02\​x00\xde\x55\x00\x00\x​00\x94\x00/​s·​and·​$virus·​=·​"W32/​Netsky.​w\@MM",​·​last·​LINE;​
 453 »       ​»       ​»       ​»       ​»       ​/​\x55\x50\x58\x30\x00\​x00\x00\x00\x00\xe0\x​06\x00\x00\x10\x00\x0​0\x00\x00\x00\x00\x00​\x04\x00\x00\x00\x00\​x00\x00\x00\x00\x00\x​00\x00\x00\x00\x00\x8​0\x00\x00\xe0\x55\x50​\x58\x31\x00\x00\x00\​x00\x00\x20\x01\x00\x​00\xf0\x06\x00\x00\x1​4\x01\x00\x00\x04\x00​\x00\x00\x00\x00\x00\​x00\x00\x00\x00\x00\x​00\x00\x00\x40\x00\x0​0\xe0\x55\x50\x58\x32​\x00\x00\x00\x00\x00\​x10\x00\x00\x00\x10\x​08\x00\x00\x02\x00\x0​0\x00\x18\x01\x00\x00​\x00\x00\x00\x00\x00\​x00\x00\x00\x00\x00\x​00\x40\x00\x00\xc0\x0​0\x00\x00\x00\x00\x00​\x00\x00/​s·​and·​$virus·​=·​"W32/​Bugbear.​b\@MM",​·​last·​LINE;​
 454 »       ​»       ​»       ​»       ​»       ​/​\x40\x00\x00\xc0\x2e\​x72\x73\x72\x63\x00{4​}\x10\x00{3}\x20\x03\​x00\x00\x02\x00\x00\x​00\x5e\x01\x00{13}\x4​0\x00\x00\xc0\x2e\x61​\x73\x70\x61\x63\x6b\​x00\x00\x20\x00\x00\x​00\x30\x03\x00\x00\x1​a\x00\x00\x00\x60\x01​\x00{13}\x40\x00\x00\​xc0\x2e\x64\x61\x74\x​61\x00{4}\x10\x00\x00​\x00\x50\x03\x00{6}\x​7a\x01\x00{13}\x40\x0​0\x00\xc0\x2e\x6c\x69​\x66\x06\x00\x00\x00\​x01\x00{4}\x60\x03\x0​0{6}\x7c\x01\x00\xb3\​xdf\xfd\xff\x6c\x5c\x​03\x00{5}\x20\x00\x00​\xe0/​s·​and·​$virus·​=·​"W32/​Lovgate.​r\@MM",​·​last·​LINE;​
 455 »       ​»       ​»       ​»       ​»       ​/​\x50\x01\x00\x00\x10\​x00\x00\xc9\x81\x00\x​00\x00\x06\x00\x00\x0​0\x00\x00\x00\x00\x00​\x00\x00\x00\x00\x00\​x00\x60\x00\x00\xe0\x​2e\x46\x72\x61\x6c\x6​9\x27\x00\x73\x03\x00​\x00\x00\x60\x01\x00\​x00\x04\x00\x00\x00\x​02\x00\x00\x00\x00\x0​0\x00\x00\x00\x00\x00​\x00\x00\x00\x00\x60\​x00\x00\xe2\x00\x00/​s·​and·​$virus·​=·​"W32/​Higuy\@MM",​·​last·​LINE;​
 456 »       ​»       ​»       ​»       ​}
 457 »       ​»       ​»       ​»       ​if($total>=30720·​&&·​$total<=43008)​·​{
 458 »       ​»       ​»       ​»       ​»       ​/​\x73\x72\x63\x3d\x33[​^\x44]*\x44\x63\x69\x​64\x3a\x57\x38\x64\x7​1\x77\x71\x38[^\x71]*​\x71\x39\x31\x4f\x31\​x33/​s·​and·​$virus·​=·​"W32/​Frethem.​fl\@MM",​·​last·​LINE;​
 459 »       ​»       ​»       ​»       ​}
 460 »       ​»       ​»       ​»       ​if($total==17408)​·​{
 461 »       ​»       ​»       ​»       ​»       ​/​\x47\x65\x74\x4c\x61\​x32\x41\x02\x76\x65\x​50\xda\x76\x16\xbb\xa​e\x75\x70\x13\x0f\x57​\x95\x64\x26\xd0\x10\​xf1\xdf\x87\x65\x73\x​73\x61\x67\x65\x42\x6​f\xc4\x73\x79\x61\x35​\xbe\x25\x33\x32\x2e\​x64/​s·​and·​$virus·​=·​"W32/​Bagz.​f\@MM",​·​last·​LINE;​
 462 »       ​»       ​»       ​»       ​»       ​/​\x60\xe8\xed\x10\x00\​x00\xc3\x83\x98\x87\x​50\x2c\x58\x04\x81\x7​c\xdb\xb6\xdf\x38\x34​\x30\x2c\xa2\x61\xf9\​xce\x6d\x0c\x1d\x13\x​33\x04\x00\x86\xc8\xe​f\xf0\xc3\xef\x8f\xca​\x08\xaf\xdb\x93\xcc\​xfa/​s·​and·​$virus·​=·​"W32/​Netsky.​j\@MM",​·​last·​LINE;​
 463 »       ​»       ​»       ​»       ​}
 464 »       ​»       ​»       ​»       ​if($total==94208)​·​{
 465 »       ​»       ​»       ​»       ​»       ​/​\x39\x38\x47\x02\x2f\​x27\x76\xd7\xf5\x50\x​69\x4f\x76\x65\x72\xc​9/​s·​and·​$virus·​=·​"W32/​Lovgate.​ac\@MM",​·​last·​LINE;​
400 »       ​»       ​»       ​»       ​}466 »       ​»       ​»       ​»       ​}
401 »       ​»       ​»       ​»       ​if($total==43008)​·​{467 »       ​»       ​»       ​»       ​if($total==43008)​·​{
402 »       ​»       ​»       ​»       ​»       ​/​\x7a\x49\x4e\x47\x0e\​x3b\x4f\x4d\x6b\xbe\x​dd\xfe\xb2\x4e\x11\x5​2\x36\x30\x32\x38\x08​\x2d\x20\x47\x61\x62\​x6c\x65\xeb\x70\x34\x​3a\x50\x20\x1f/​s·​and·​$virus·​=·​"W32/​Palyh\@MM",​·​last·​LINE;​468 »       ​»       ​»       ​»       ​»       ​/​\x7a\x49\x4e\x47\x0e\​x3b\x4f\x4d\x6b\xbe\x​dd\xfe\xb2\x4e\x11\x5​2\x36\x30\x32\x38\x08​\x2d\x20\x47\x61\x62\​x6c\x65\xeb\x70\x34\x​3a\x50\x20\x1f/​s·​and·​$virus·​=·​"W32/​Palyh\@MM",​·​last·​LINE;​
403 »       ​»       ​»       ​»       ​}469 »       ​»       ​»       ​»       ​}
404 »       ​»       ​»       ​»       ​if($total==31744)​·​{470 »       ​»       ​»       ​»       ​if($total==8192)​·​{
405 »       ​»       ​»       ​»       ​»       ​/​\x4e\x00\x61\x00\x76\​x00\x69\x00\x64\x00\x​61\x00\x64\x00\x20\x0​0\x56\x00\x65\x00\x72​\x00\x73\x00\x69\x00\​x6f\x00\x6e\x00\x20\x​00\d+.​+\x43\x00\x6f\x00\x70​\x00\x79\x00\x72\x00\​x69\x00\x67\x00\x68\x​00\x74\x00\x20\x00\x2​8\x00\x43\x00\x29\x00​\x20\x00\d\x00\d\x00\​d\x00\d\x00/​s·​and·​$virus·​=·​"W32/​Navidad.​gen\@M",​·​last·​LINE;​471 »       ​»       ​»       ​»       ​»       ​/​\x03\x25\xf6\xbf\xc0\​x43\x5c\x0a\x2b\x65\x​69\x6e\x61\x68\x6e\x7​5\x6e\x67\x25\xd6\x1e​\xb2\x39\x70\x17\x00\​x00\x02\x04\x30\x15\x​3e/​s·​and·​$virus·​=·​"W32/​Sober.​p\@MM",​·​last·​LINE;​
 472 »       ​»       ​»       ​»       ​»       ​/​\x43.​{3,​4}\x42\xdc?\x0d.​{4}\x48\x45\x4c\x4c?\​x4f.​{3,​4}\x52\x53[\x6c\xb0]\​x54\x0f\x4d\x07?\x41\​x49\x1f?\x4c\x20\x46[​\xd7\x5e]\x4f[\x82\x0​9]\x3a\x3c.​{3}\x30\x43\x50\x54\x​20[\xc9\x25]\x4f[\x58​\x61]\x0f/​s·​and·​$virus·​=·​"W32/​Bagle.​u\@MM",​·​last·​LINE;​
 473 »       ​»       ​»       ​»       ​»       ​/​\x6a\x70\x67\x76\x69\​x72/​s·​and·​$virus·​=·​"W32/​Perrun",​·​last·​LINE;​
 474 »       ​»       ​»       ​»       ​}
 475 »       ​»       ​»       ​»       ​if($total==2048·​||·​$total==4096)​·​{
 476 »       ​»       ​»       ​»       ​»       ​/​\x52\x55\x4e\x44.​{0,​4}\x4c\x4c\x33\x32\x2​e\x45\x58\x45\x20\x25​\x73\x2c\x5f\x6d\x61\​x69\x6e\x52\x44\x00\x​44\x6c\x6c\x52\x65\x6​7\x69\x73\x74\x65\x72​\x53.​{2,​5}\x76.​{0,​3}\x00\x00\x64\x6c\x6​c\x00\x65\x78\x65\x00​\x43\x4c\x53\x49\x44\​x5c\x7b.​{34,​38}\x30\x31\x7d\x00.​{1,​3}\x20\x6d\x75\x74.​{0,​2}\x31\x20/​s·​and·​$virus·​=·​"W32/​Mabutu.​a\@MM",​·​last·​LINE;​
 477 »       ​»       ​»       ​»       ​}
 478 »       ​»       ​»       ​»       ​if($total==6144·​||·​$total==3072·​||·​$total==6144)​·​{
 479 »       ​»       ​»       ​»       ​»       ​/​\x60\xe8\x01\x00\x00\​x00\xe8\x83\xc4\x04\x​e8\x01\x00\x00\x00\xe​9\x5d\x81\xed\xd9\x21​\x40\x00\xe8[\x05\x04​]\x02\x00\x00\xe8\xeb​\x08\xeb\x02\xcd\x20\​xff\x24\x24\x9a\x66\x​be[\x35\x52][\x53\x47​\xe1]\xe8\x01\x00\x00​\x00/​s·​and·​$virus·​=·​"W32/​Bagle.​e\@MM",​·​last·​LINE;​
406 »       ​»       ​»       ​»       ​}480 »       ​»       ​»       ​»       ​}
407 »       ​»       ​»       ​»       ​if($total==2048)​·​{481 »       ​»       ​»       ​»       ​if($total==2048)​·​{
 482 »       ​»       ​»       ​»       ​»       ​/​\x43\x6f\x64\x65\x64\​x20\x2e\x2e\x2e\x62\x​79\x20\x42\x65\x67\x6​2\x69\x65\x2c\x20\x53​\x6c\x6f\x76\x61\x6b\​x69\x61/​s·​and·​$virus·​=·​"W32/​Gibe.​b\@MM",​·​last·​LINE;​
 483 »       ​»       ​»       ​»       ​»       ​/​\x4f\x54\x9a\xf6\xd9\​xef\x93\xa0\x2a\xba\x​53\x51\x93\xe5\x92\xb​9\xc0\x2b\xa3\xf4\x1b​\xd3\x6d\x80\x69\x91\​xea\xec\x1b\x3d\xa3\x​28\x02\x12\x0a\xc4\xa​2\x2b\x13\x23\x7c\x82​\xbf\xc7\x0c\xa4\x2e\​xc1/​s·​and·​$virus·​=·​"W32/​Netsky.​x\@MM",​·​last·​LINE;​
 484 »       ​»       ​»       ​»       ​»       ​/​\x00\x63\x3a\x5c\x74\​x6d\xff\xbf\xfc\xff\x​70\x2e\x65\x78\x65\x0​0\x68\x74\x74\x70\x3a​\x2f\x2f\x77\x2e\x61\​x71\x75\x61\x72\x69\x​75\x6d\x2d\x66\x69\x7​3\x20\xab\x6f\xff\x68​\x2e\x72\x75\x2f\x70\​x70\x61\x02\x2e\x62/​s·​and·​$virus·​=·​"Downloader-​GN",​·​last·​LINE;​
 485 »       ​»       ​»       ​»       ​»       ​/​\x42\x6c\x61[\x63\xbd​].​{0,​4}\x6b\x57\x6f\x72\x6​d/​s·​and·​$virus·​=·​"W32/​MyWife.​b\@MM",​·​last·​LINE;​
 486 »       ​»       ​»       ​»       ​»       ​/​\x1f\x64\x17\x07\x56\​xaf\x85\x85\xdb\x8f\x​0a\x53\xc9\xff\xdb\x1​1\xe2\x3f\x4f\x78\x43​\x03\x30\x4c\x59\x20\​xb1\x08\xc9\x0d\x42\x​08\x04\x56\x74\x32\xe​1\xe5\x8a\x91\x6c\x9a​\x40\x10\x4c\x24\xc1\​x7f/​s·​and·​$virus·​=·​"W32/​Netsky.​ab\@MM",​·​last·​LINE;​
 487 »       ​»       ​»       ​»       ​»       ​/​\x31\x2e\x39\x30\x00\​xb6\xd1\xa5\xc9\x0d\x​09\x08\x0a\x70\x86\x2​c\xdf\x13\x5b\x4d\x1b​\x2b\xdc\x04\x00\x5b\​xc9\x01\x00\x00\x00\x​04\x00\x26\x13\xff\x8​9\x33\x32\x80\x03\x1a​\x32\xb2\x80\x0a\x24\​xa8\xdd\x46\xaa\x39\x​ec\x6d\x8a\x8e\x54\x6​d\xb6\xdb\x6d\xb6\x2a​\x36\xdb\x6d\xba\x8d\​xb9/​s·​and·​$virus·​=·​"W32/​Lovgate.​ai\@MM",​·​last·​LINE;​
408 »       ​»       ​»       ​»       ​»       ​/​\xe8\x9b\x03\x00\x00\​x85\xc0\x75\x01\xc3\x​a1\x0c\x48\x00\x10\x5​3\x33\xdb\x3b\xc3\x75​\x17\x68\x00\x14\x00\​x10\x68\xe0\x93\x04\x​00\x53\x53\xff\x15\x2​8\x20\x00\x10\xa3\x0c​\x48\x00\x10\x6a\x1c\​x68\x20\x30\x00\x10\x​e8\x27\x04\x00\x00\x6​a\x10\x68\x40\x30/​s·​and·​$virus·​=·​"W32/​Fizzer.​dll",​·​last·​LINE;​488 »       ​»       ​»       ​»       ​»       ​/​\xe8\x9b\x03\x00\x00\​x85\xc0\x75\x01\xc3\x​a1\x0c\x48\x00\x10\x5​3\x33\xdb\x3b\xc3\x75​\x17\x68\x00\x14\x00\​x10\x68\xe0\x93\x04\x​00\x53\x53\xff\x15\x2​8\x20\x00\x10\xa3\x0c​\x48\x00\x10\x6a\x1c\​x68\x20\x30\x00\x10\x​e8\x27\x04\x00\x00\x6​a\x10\x68\x40\x30/​s·​and·​$virus·​=·​"W32/​Fizzer.​dll",​·​last·​LINE;​
 489 »       ​»       ​»       ​»       ​»       ​/​\xe8\x51\x50\x00\x00\​xc3\x52\x53\xb6\x59\x​b2\x73\xf9\x66\xe4\x1​d\x98\x07\xde\x15\xa5​\x94\xd0\x1d\x54\x7b\​xf9\x34\x6b\x97\x44\x​8f\xc6\xb0\xb9\xaa\x1​1\x70\xb4\x97\x8c\xc3​\x0b\x33\x15\xa1\x60\​x05\x51\x89\x80\xf5\x​25\xba\x89\xa9\xfc\x3​d\x67\x74\x47\xee\x91​\x19/​s·​and·​$virus·​=·​"W32/​Bobax.​worm.​c",​·​last·​LINE;​
 490 »       ​»       ​»       ​»       ​»       ​/​\xff\x01\x06\x00\x53\​x48\x41\x52\x4f\x4e\x​00\x19\x93\x42\x00\x2​2/​s·​and·​$virus·​=·​"W32/​MyLife.​j\@MM",​·​last·​LINE;​
409 »       ​»       ​»       ​»       ​»       ​/​\x00\xad\x01\xff\x60\​x65\x63\x68\x6f\x72\x​20\x77\x70\x75\x6e\x3​3\x25\x73\x06\x64\xdb​\x3e\xe9\x61\x0a\x53\​x14\x6c\x47\x16\x0c\x​21\x70\xe7\x67\x67\x7​4\xe1\x73\x75\x70\xc9​\x2e\xf9\x78\xea\x96\​x17\x0a\x71\x75\x69\x​74\x0f/​s·​and·​$virus·​=·​"MultiDropper-​KR",​·​last·​LINE;​491 »       ​»       ​»       ​»       ​»       ​/​\x00\xad\x01\xff\x60\​x65\x63\x68\x6f\x72\x​20\x77\x70\x75\x6e\x3​3\x25\x73\x06\x64\xdb​\x3e\xe9\x61\x0a\x53\​x14\x6c\x47\x16\x0c\x​21\x70\xe7\x67\x67\x7​4\xe1\x73\x75\x70\xc9​\x2e\xf9\x78\xea\x96\​x17\x0a\x71\x75\x69\x​74\x0f/​s·​and·​$virus·​=·​"MultiDropper-​KR",​·​last·​LINE;​
410 »       ​»       ​»       ​»       ​»       ​/​\x00\x63\x3a\x5c\x74\​x6d\xff\xbf\xfc\xff\x​70\x2e\x65\x78\x65\x0​0\x68\x74\x74\x70\x3a​\x2f\x2f\x77\x2e\x61\​x71\x75\x61\x72\x69\x​75\x6d\x2d\x66\x69\x7​3\x20\xab\x6f\xff\x68​\x2e\x72\x75\x2f\x70\​x70\x61\x02\x2e\x62/​s·​and·​$virus·​=·​"Downloader-​GN",​·​last·​LINE;​ 
411 »       ​»       ​»       ​»       ​»       ​/​\x43\x6f\x64\x65\x64\​x20\x2e\x2e\x2e\x62\x​79\x20\x42\x65\x67\x6​2\x69\x65\x2c\x20\x53​\x6c\x6f\x76\x61\x6b\​x69\x61/​s·​and·​$virus·​=·​"W32/​Gibe.​b\@MM",​·​last·​LINE;​ 
412 »       ​»       ​»       ​»       ​»       ​/​\x03\x3b\xb8\x39\x91\​x23\x33\x00\x1a\x2f\x​f9\x78\x49\x00\x85\x2​4\x21\x64\xb8\x89\x00​\x83\x0b\xc8\x28\x2a\​x53\x14\x06\x08\xa1\x​21\x70\x4a\x42\x02\xa​5\x24\x51\x58\x8c\x10​\x8a\x43\xf9\x04\x71\​x70\x41\x40\x68\x0a\x​98\xa6\x38\x0a\x2e\x1​4\x51\x85\xc1\x04\xb3​\x88/​s·​and·​$virus·​=·​"W32/​Netsky.​z\@MM",​·​last·​LINE;​ 
413 »       ​»       ​»       ​»       ​»       ​/​\x20\x03\x2b\x3a\x99\​x12\x22\x80\x2b\x3e\x​f7\x26\xe1\x36\x06\xc​2\x40\x20\x91\x10\x58​\xac\x14\x50\x54\x58\​x0a\x0c\x05\x87\x48\x​20\x84\x0d\xee\x40\x9​0\x10\x20\x2a\x23\xb6​\x2a\x22\x1b\xda\x8b\​x64\x10\x64\x8b\x37\x​3f\x1b\x51\xb4\x1e\xc​2\xa0\xa2\xa2\xa2\xa2​\x22/​s·​and·​$virus·​=·​"Exploit-​DcomRpc.​gen",​·​last·​LINE;​492 »       ​»       ​»       ​»       ​»       ​/​\x20\x03\x2b\x3a\x99\​x12\x22\x80\x2b\x3e\x​f7\x26\xe1\x36\x06\xc​2\x40\x20\x91\x10\x58​\xac\x14\x50\x54\x58\​x0a\x0c\x05\x87\x48\x​20\x84\x0d\xee\x40\x9​0\x10\x20\x2a\x23\xb6​\x2a\x22\x1b\xda\x8b\​x64\x10\x64\x8b\x37\x​3f\x1b\x51\xb4\x1e\xc​2\xa0\xa2\xa2\xa2\xa2​\x22/​s·​and·​$virus·​=·​"Exploit-​DcomRpc.​gen",​·​last·​LINE;​
414 »       ​»       ​»       ​»       ​»       ​/​\x2f\x29\x9f\x4f\x6f\​x90\x61\x82\xb5\x46\x​b1\x87\x12\x5e\x6f\xd​1\xc8\x47\xec\x1e\x5f​\xb3\x5b\x5a\x21\x22\​x39\xae\x38\x6b\xdd\x​d2\xe2\x5d\x37\xb7\xd​d\x20\x4a\x76\xc7\xdc​\x1d\xf4\xde\x0f\xf4\​xd5\x5f\x20\x5b\xe8\x​36\xfd\xdf\xaa\x53\x4​9\x84\x76\x74\x25\x58​\xe7\x17\x29/​s·​and·​$virus·​=·​"W32/​Korgo.​worm.​aa",​·​last·​LINE;​493 »       ​»       ​»       ​»       ​»       ​/​\x2f\x29\x9f\x4f\x6f\​x90\x61\x82\xb5\x46\x​b1\x87\x12\x5e\x6f\xd​1\xc8\x47\xec\x1e\x5f​\xb3\x5b\x5a\x21\x22\​x39\xae\x38\x6b\xdd\x​d2\xe2\x5d\x37\xb7\xd​d\x20\x4a\x76\xc7\xdc​\x1d\xf4\xde\x0f\xf4\​xd5\x5f\x20\x5b\xe8\x​36\xfd\xdf\xaa\x53\x4​9\x84\x76\x74\x25\x58​\xe7\x17\x29/​s·​and·​$virus·​=·​"W32/​Korgo.​worm.​aa",​·​last·​LINE;​
415 »       ​»       ​»       ​»       ​»       ​/​\x1f\x64\x17\x07\x56\​xaf\x85\x85\xdb\x8f\x​0a\x53\xc9\xff\xdb\x1​1\xe2\x3f\x4f\x78\x43​\x03\x30\x4c\x59\x20\​xb1\x08\xc9\x0d\x42\x​08\x04\x56\x74\x32\xe​1\xe5\x8a\x91\x6c\x9a​\x40\x10\x4c\x24\xc1\​x7f/​s·​and·​$virus·​=·​"W32/​Netsky.​ab\@MM",​·​last·​LINE;​ 
416 »       ​»       ​»       ​»       ​»       ​/​\xff\x01\x06\x00\x53\​x48\x41\x52\x4f\x4e\x​00\x19\x93\x42\x00\x2​2/​s·​and·​$virus·​=·​"W32/​MyLife.​j\@MM",​·​last·​LINE;​ 
417 »       ​»       ​»       ​»       ​»       ​/​\x9d\x7e\x58\xd8\x63\​x2f\xb7.​\xce\x8c\x24\xe8\x25.​\x6c\x68\x23\x36\x94\​x0b\x6e\x51\x52.​{6,​7}\x0c\x10\xe4\xbf.​.​\x41\x68\xc9\xff.​.​.​.​\x39\xf2\xae\xf7\xd1\​x2b\xf9\x8b\xf7\x8b\x​d9\x8b\xfa\x10\x0e\x8​b\xcb\x4f\xc1\xe9.​.​.​.​.​.​\xa5\xa1.​\xd2\x03\xcb\x83\xe1\​x03\x95\xf3\xa4\x8b\x​57.​.​.​.​\xfc\xb4\xab\x81\x52\​x66\xb4.​.​.​.​.​.​.​.​\x15\x2c\xce\x52.​.​.​.​.​.​\x88\x50\x53\x78\xc7\​x0d\x04\x03/​s·​and·​$virus·​=·​"W32/​Lirva.​gen\@MM",​·​last·​LINE;​494 »       ​»       ​»       ​»       ​»       ​/​\x9d\x7e\x58\xd8\x63\​x2f\xb7.​\xce\x8c\x24\xe8\x25.​\x6c\x68\x23\x36\x94\​x0b\x6e\x51\x52.​{6,​7}\x0c\x10\xe4\xbf.​.​\x41\x68\xc9\xff.​.​.​.​\x39\xf2\xae\xf7\xd1\​x2b\xf9\x8b\xf7\x8b\x​d9\x8b\xfa\x10\x0e\x8​b\xcb\x4f\xc1\xe9.​.​.​.​.​.​\xa5\xa1.​\xd2\x03\xcb\x83\xe1\​x03\x95\xf3\xa4\x8b\x​57.​.​.​.​\xfc\xb4\xab\x81\x52\​x66\xb4.​.​.​.​.​.​.​.​\x15\x2c\xce\x52.​.​.​.​.​.​\x88\x50\x53\x78\xc7\​x0d\x04\x03/​s·​and·​$virus·​=·​"W32/​Lirva.​gen\@MM",​·​last·​LINE;​
418 »       ​»       ​»       ​»       ​»       ​/​\x42\x6c\x61[\x63\xbd​].​{0,​4}\x6b\x57\x6f\x72\x6​d/​s·​and·​$virus·​=·​"W32/​MyWife.​b\@MM",​·​last·​LINE;​ 
419 »       ​»       ​»       ​»       ​»       ​/​\xe8\x51\x50\x00\x00\​xc3\x52\x53\xb6\x59\x​b2\x73\xf9\x66\xe4\x1​d\x98\x07\xde\x15\xa5​\x94\xd0\x1d\x54\x7b\​xf9\x34\x6b\x97\x44\x​8f\xc6\xb0\xb9\xaa\x1​1\x70\xb4\x97\x8c\xc3​\x0b\x33\x15\xa1\x60\​x05\x51\x89\x80\xf5\x​25\xba\x89\xa9\xfc\x3​d\x67\x74\x47\xee\x91​\x19/​s·​and·​$virus·​=·​"W32/​Bobax.​worm.​c",​·​last·​LINE;​ 
420 »       ​»       ​»       ​»       ​»       ​/​\x83\x00\x7c\x24\x08\​x01\x75\x0a\xff\x74\x​00\x24\x04\xe8\x0a\x0​0\x01\x30\x59\x00\x6a​\x01\x58\xc2\x0c\x00\​x55\x8b\x00\xec\x8b\x​4d\x0c\x33\xc0\x49\x8​3\x00\xf9\x08\x77\x66​\xff\x24\x8d\x8f\x16\​x10/​s·​and·​$virus·​=·​"W32/​Netsky.​ac\@MM",​·​last·​LINE;​495 »       ​»       ​»       ​»       ​»       ​/​\x83\x00\x7c\x24\x08\​x01\x75\x0a\xff\x74\x​00\x24\x04\xe8\x0a\x0​0\x01\x30\x59\x00\x6a​\x01\x58\xc2\x0c\x00\​x55\x8b\x00\xec\x8b\x​4d\x0c\x33\xc0\x49\x8​3\x00\xf9\x08\x77\x66​\xff\x24\x8d\x8f\x16\​x10/​s·​and·​$virus·​=·​"W32/​Netsky.​ac\@MM",​·​last·​LINE;​
421 »       ​»       ​»       ​»       ​»       ​/​\x31\x2e\x39\x30\x00\​xb6\xd1\xa5\xc9\x0d\x​09\x08\x0a\x70\x86\x2​c\xdf\x13\x5b\x4d\x1b​\x2b\xdc\x04\x00\x5b\​xc9\x01\x00\x00\x00\x​04\x00\x26\x13\xff\x8​9\x33\x32\x80\x03\x1a​\x32\xb2\x80\x0a\x24\​xa8\xdd\x46\xaa\x39\x​ec\x6d\x8a\x8e\x54\x6​d\xb6\xdb\x6d\xb6\x2a​\x36\xdb\x6d\xba\x8d\​xb9/​s·​and·​$virus·​=·​"W32/​Lovgate.​ai\@MM",​·​last·​LINE;​496 »       ​»       ​»       ​»       ​»       ​/​\x03\x3b\xb8\x39\x91\​x23\x33\x00\x1a\x2f\x​f9\x78\x49\x00\x85\x2​4\x21\x64\xb8\x89\x00​\x83\x0b\xc8\x28\x2a\​x53\x14\x06\x08\xa1\x​21\x70\x4a\x42\x02\xa​5\x24\x51\x58\x8c\x10​\x8a\x43\xf9\x04\x71\​x70\x41\x40\x68\x0a\x​98\xa6\x38\x0a\x2e\x1​4\x51\x85\xc1\x04\xb3​\x88/​s·​and·​$virus·​=·​"W32/​Netsky.​z\@MM",​·​last·​LINE;​
422 »       ​»       ​»       ​»       ​»       ​/​\x4f\x54\x9a\xf6\xd9\​xef\x93\xa0\x2a\xba\x​53\x51\x93\xe5\x92\xb​9\xc0\x2b\xa3\xf4\x1b​\xd3\x6d\x80\x69\x91\​xea\xec\x1b\x3d\xa3\x​28\x02\x12\x0a\xc4\xa​2\x2b\x13\x23\x7c\x82​\xbf\xc7\x0c\xa4\x2e\​xc1/​s·​and·​$virus·​=·​"W32/​Netsky.​x\@MM",​·​last·​LINE;​497 »       ​»       ​»       ​»       ​}
 498 »       ​»       ​»       ​»       ​if($total==29696·​||·​$total==71680)​·​{
 499 »       ​»       ​»       ​»       ​»       ​/​\x3a\x2f\x2f\x77\x77\​x32\x2e\x66.​{1,​2}\x2e\x76.​{64,​93}\x45\x4c\x45.​{18,​21}\x4f\x4b.​{1,​5}\x53\x54\x41.​{1,​5}\x50\x41\x53\x53/​s·​and·​$virus·​=·​"W32/​Swen\@MM",​·​last·​LINE;​
 500 »       ​»       ​»       ​»       ​}
 501 »       ​»       ​»       ​»       ​if($total==66560)​·​{
 502 »       ​»       ​»       ​»       ​»       ​/​\x4e\x65\x74\x4d\x65\​x65\x74\x69\x6e\x67\x​20\x52\x65\x6d\x6f\x7​4\x65\x20\x44\x65\x73​\x6b\x74\x6f\x70\x20\​x28\x52\x50\x43\x29\x​20\x53\x68\x61\x72\x6​9\x6e\x67\x00\x73\x6d​\x74\x70\x2e\x31\x36\​x33\x2e\x63\x6f\x6d\x​00\x00\x00\x00/​s·​and·​$virus·​=·​"BackDoor-​AQJ",​·​last·​LINE;​
 503 »       ​»       ​»       ​»       ​}
 504 »       ​»       ​»       ​»       ​if($total==5120)​·​{
 505 »       ​»       ​»       ​»       ​»       ​/​\x6f\x70\x65\x6e\x13\​x4d\x6f\x7a\x5f\x6c\x​61\x5f\x70\x51\xc3\x2​f\x34\xeb\x28\x5c\x02​\x69\x62\x6c\x65\x5f\​xa0\x70\x84\x29\xc7\x​42\x43\xb6\xfb\x61\x5​3\x4c\x4f\xd1\x67\xfe​\x5b\x92\x68\x74\x74\​x70\x73\x65\x72\x76\x​4c\x61\x7b\xae\xde\x7​5\xc7\x62\x23\x49\x43​\x37/​s·​and·​$virus·​=·​"W32/​Mydoom.​ba\@MM",​·​last·​LINE;​
 506 »       ​»       ​»       ​»       ​»       ​/​\x71\x9d\xcc\x1e\x2e\​x77\xaa\x7a\x4d\x28\x​d4\xa4\x00\xcd\xe3\xc​d\xe4\x03\x8d\x15\x18​\xb3\xd2\x7b\x64\x51\​x32\xf1\x27\xc1\x76\x​92\xeb\xe0\xd8\x54\x2​6\x0e\xda\x13\x57\xf3​\x3f\xde\x09\x49\x5c\​x0a/​s·​and·​$virus·​=·​"W32/​Sobig\@MM",​·​last·​LINE;​
 507 »       ​»       ​»       ​»       ​»       ​/​\x71\x32\x31\x36\x33\​x30\x39\x00\x71\x32\x​31\x36\x33\x30\x39\x0​0\x00\x71\x32\x31\x36​\x33\x30\x39\x00\x00\​x00\x00\xf4\x01\x00\x​00\x34\x1c\x40/​s·​and·​$virus·​=·​"W32/​Gibe\@MM",​·​last·​LINE;​
 508 »       ​»       ​»       ​»       ​»       ​/​\x32\x83\x00\x02\x9a\​x03\x2a\x80\x0b\x1c\x​6d\xb6\xb2\x36\xdb\x7​3\x71\xb6\xd6\x43\x91​\xb1\x91\xcd\xcc\x8d\​xac\x8e\x4c\x93\x23\x​6b\x71\xb1\x91\x6e\x3​6\xdb\x62\x8d\xe5\x09​\xda\x13\x94\x27\x68\​xce\x7f\x3e\xaf\x79\x​42\x76\xff\xbe\x7b\xa​d\x52\x1e\x8f\x35\xe1​\x91/​s·​and·​$virus·​=·​"W32/​Lovgate.​af\@MM",​·​last·​LINE;​
 509 »       ​»       ​»       ​»       ​»       ​/​\x02\xaa\x00\x02\x9a\​x02\xa8\x00\x0a\xa4\x​97\x1b\x6d\xb6\x2e\x3​6\xdc\xb8\xee\x36\xda​\xe4\x6d\xb7\x27\x23\​x6d\x5c\x6d\xb7\x71\x​b6\xdb\x97\x17\x24\x9​9\x17\xbf\x9d\xfc\xee​\x0d\xf6\x7f\xcf\xf8\​xdf\xda\xd6\x11\xdd\x​56\xea\x82\x0b\xe0\x7​f\x02\xd5\xe5\xf4\x02​\xf4/​s·​and·​$virus·​=·​"W32/​Lovgate.​q\@MM",​·​last·​LINE;​
 510 »       ​»       ​»       ​»       ​}
 511 »       ​»       ​»       ​»       ​if($total==5120·​||·​($total>=10240·​&&·​$total<=15360)​·​||·​$total==45056)​·​{
 512 »       ​»       ​»       ​»       ​»       ​/​[\xee\x95\x00\x95\x2d​\x02][\x19\x51]\x55\x​49\x54[\x8e\xfa\x0d\x​a7\x83\xf3].​{6,​27}\x41.​{6,​35}\x20.​{0,​55}[\x54\x3e][\x4f\x6​f\x7e]/​s·​and·​$virus·​=·​"W32/​Mydoom\@MM",​·​last·​LINE;​
423 »       ​»       ​»       ​»       ​}513 »       ​»       ​»       ​»       ​}
424 »       ​»       ​»       ​»       ​if($total==9216)​·​{514 »       ​»       ​»       ​»       ​if($total==9216)​·​{
 515 »       ​»       ​»       ​»       ​»       ​/​\x6e\x74\x70\x3a\x2f\​x2f\x63\x05\xc5\x82\x​6a\x79\x63\x2e\x6d\x2​f\x61\x30\x62\x1b\xd5​\x6c\x69\x2f\x69\x10\​xb3\xa2\x7b\x66\x70\x​68\x9e\x11\xba\x13\x7​0\x3f\x75\x69\x64\x3d​\xc5\x81\xd3\xc9\x70\​x3d\x37\x26\x76\x69\x​88\x19\x50\x31\x3d\x7​4\x72\x79\x00/​s·​and·​$virus·​=·​"W32/​Downloader-​PH",​·​last·​LINE;​
425 »       ​»       ​»       ​»       ​»       ​/​\x6d\x6f\x76\x20\x5b\​x77\xf0\xb7\x56\xb8\x​00\x2e\x70\x6c\x57\xb​7\x76\x69\x72\x75\x73​\x2e\x9f\x6b\x77\xbf\​x4d\x6d\x5d\x20\x2a\x​2f\x37\x52\x65\x67\xf​8\xc2\xa0/​s·​and·​$virus·​=·​"BackDoor-​CAG",​·​last·​LINE;​516 »       ​»       ​»       ​»       ​»       ​/​\x6d\x6f\x76\x20\x5b\​x77\xf0\xb7\x56\xb8\x​00\x2e\x70\x6c\x57\xb​7\x76\x69\x72\x75\x73​\x2e\x9f\x6b\x77\xbf\​x4d\x6d\x5d\x20\x2a\x​2f\x37\x52\x65\x67\xf​8\xc2\xa0/​s·​and·​$virus·​=·​"BackDoor-​CAG",​·​last·​LINE;​
426 »       ​»       ​»       ​»       ​»       ​/​\x40\x00\x4c\x62\x42\​x46\xfe\xff\x56\x42\x​35\x21\xf0\x1f\x56\x4​2\x36\x45\x53\x2e\x44​\x4c\x4c\x2a.​{11,​14}\x40/​s·​and·​$virus·​=·​"W32/​Darby\@MM",​·​last·​LINE;​517 »       ​»       ​»       ​»       ​»       ​/​\x40\x00\x4c\x62\x42\​x46\xfe\xff\x56\x42\x​35\x21\xf0\x1f\x56\x4​2\x36\x45\x53\x2e\x44​\x4c\x4c\x2a.​{11,​14}\x40/​s·​and·​$virus·​=·​"W32/​Darby\@MM",​·​last·​LINE;​
427 »       ​»       ​»       ​»       ​»       ​/​\x6e\x74\x70\x3a\x2f\​x2f\x63\x05\xc5\x82\x​6a\x79\x63\x2e\x6d\x2​f\x61\x30\x62\x1b\xd5​\x6c\x69\x2f\x69\x10\​xb3\xa2\x7b\x66\x70\x​68\x9e\x11\xba\x13\x7​0\x3f\x75\x69\x64\x3d​\xc5\x81\xd3\xc9\x70\​x3d\x37\x26\x76\x69\x​88\x19\x50\x31\x3d\x7​4\x72\x79\x00/​s·​and·​$virus·​=·​"W32/​Downloader-​PH",​·​last·​LINE;​ 
428 »       ​»       ​»       ​»       ​}518 »       ​»       ​»       ​»       ​}
429 »       ​»       ​»       ​»       ​if($total==46080)​·​{519 »       ​»       ​»       ​»       ​if($total==46080)​·​{
430 »       ​»       ​»       ​»       ​»       ​/​\x50\xe8\xce\x86\x00\​x00\x83\xc4\x04\xc7\x​46\x44\x00\x00\x00\x0​0\x8b\xce\xe8\xf9\xf8​\xff\xff\x5e\xc3\x90\​x90\x90\x90\x90\x90\x​90\x8b\x44\x24\x08\x8​b\x54\x24\x04\x50\x52​\xe8\x31\xf9\xff\xff\​xc2/​s·​and·​$virus·​=·​"BackDoor-​ARG",​·​last·​LINE;​520 »       ​»       ​»       ​»       ​»       ​/​\x50\xe8\xce\x86\x00\​x00\x83\xc4\x04\xc7\x​46\x44\x00\x00\x00\x0​0\x8b\xce\xe8\xf9\xf8​\xff\xff\x5e\xc3\x90\​x90\x90\x90\x90\x90\x​90\x8b\x44\x24\x08\x8​b\x54\x24\x04\x50\x52​\xe8\x31\xf9\xff\xff\​xc2/​s·​and·​$virus·​=·​"BackDoor-​ARG",​·​last·​LINE;​
431 »       ​»       ​»       ​»       ​}521 »       ​»       ​»       ​»       ​}
432 »       ​»       ​»       ​»       ​if($total==18432)​·​{522 »       ​»       ​»       ​»       ​if($total>=6144·​&&·​$total<=9216)​·​{
433 »       ​»       ​»       ​»       ​»       ​/​\x4d\x61\x64\x65\x20\​x62\x79\x20\x41\x78\x​69\x61\x6c\x69\x73\x2​0\x41\x58\x2d\x49\x63​\x6f\x6e\x20\d\x2e\d/​s·​and·​$virus·​=·​"BackDoor-​AJH",​·​last·​LINE;​523 »       ​»       ​»       ​»       ​»       ​/​\x2b\x0c\x01[\x94\x54​\xcc\x2c].​{2,​7}\x6f\x6b\x75\x6d.​{0,​4}\x65\x6e\x74/​s·​and·​$virus·​=·​"W32/​Sober\@MM",​·​last·​LINE;​
434 »       ​»       ​»       ​»       ​} 
435 »       ​»       ​»       ​»       ​if($total==11264)​·​{ 
436 »       ​»       ​»       ​»       ​»       ​/​\x49\x00\x20\x00\x63\​x00\x6f\x00\x6d\x00\x​65\x00\x20\x00\x69\x0​0\x6e\x00\x20\x00\x70​\x00\x69\x00\x65\x00\​x63\x00\x65\x00\x2e\x​00\x20\x00\x20\x00\x2​0\x00\x4d\x00\x79\x00​\x20\x00\x6e\x00\x61\​x00\x6d\x00\x65\x00\x​20\x00\x69\x00\x73\x0​0\x20\x00\x4a\x00\x65​\x00\x72\x00\x72\x00\​x79/​s·​and·​$virus·​=·​"W32/​Choke.​c.​worm",​·​last·​LINE;​ 
437 »       ​»       ​»       ​»       ​»       ​/​\xc1\x09\xf7\x28\x80\​x72\xed\xf8\x3d\xcb\x​14\x66\xa9\xfa\x63\x9​9\xe6\x17\x84\x07\x0c​\x48\x45\x4c\x4f\x44\​x4d\x3b\x41\x49\xf6\x​3d\x46\x52\x78\xdd\x5​d\x87\x43\x50\x54\xce​\x5e\xf4\x15\xb8\x2b\​x49/​s·​and·​$virus·​=·​"W32/​Zafi.​b\@MM",​·​last·​LINE;​ 
438 »       ​»       ​»       ​»       ​} 
439 »       ​»       ​»       ​»       ​if($total<=4096)​·​{ 
440 »       ​»       ​»       ​»       ​»       ​/​\x70\x65\x6e\x74\x61\​x67\x6f\x6e\x65/​s·​and·​$virus·​=·​"W32/​Goner\@MM",​·​last·​LINE;​ 
441 »       ​»       ​»       ​»       ​} 
442 »       ​»       ​»       ​»       ​if($total==41984)​·​{ 
443 »       ​»       ​»       ​»       ​»       ​/​\x40\x03\x2e\x33\x3b\​x7e\x6f\xad\x92\x6f\x​41\x54\x41\x44\x32\x3​5\x87\x43\x50\x7d\x84​\x76\x07\x47\x4f\x3a\​x3c\x27\x7d\x4d\x41\x​49\x4c\xc2\x4b\xe6\x6​8\xe8\xa3\x11\x27\x0d​\x8b\xd2\x4d\xfa\x48\​x45\x4c\x4f\x12\x0f\x​32\xb5\x2b\x10\x6f\x6​1\x2b\x17\x75\xbb\xc3​\x03/​s·​and·​$virus·​=·​"W32/​Bugbear\@MM",​·​last·​LINE;​ 
444 »       ​»       ​»       ​»       ​»       ​/​\x4d\x00\x61\x00\x63\​x00\x68\x00\x69\x00\x​6e\x00\x65\x00\x64\x0​0\x72\x00\x61\x00\x6d​\x00\x6f\x00\x6e\x00\​x64\x00\x61\x00\x72\x​00\x6b\x00\x40\x00\x6​c\x00\x61\x00\x74\x00​\x69\x00\x6e\x00\x6d\​x00\x61\x00\x69\x00\x​6c\x00\x2e\x00\x63\x0​0\x6f\x00\x6d\x00/​s·​and·​$virus·​=·​"W32/​Sachiel.​worm",​·​last·​LINE;​ 
445 »       ​»       ​»       ​»       ​} 
446 »       ​»       ​»       ​»       ​if($total==3072·​||·​$total==8192)​·​{ 
447 »       ​»       ​»       ​»       ​»       ​/​\x50\x72\x6f\x6a\x65.​{22,​35}\x43.​{13,​28}\x4f\xad\x33\x99\x​66\xcf\x11\xb7.​{3}\xd3\x93.​{6,​7}\x3b.​{3,​25}\x46\x6f\x72\x6d/​s·​and·​$virus·​=·​"W32/​Sober.​j\@MM",​·​last·​LINE;​ 
448 »       ​»       ​»       ​»       ​} 
449 »       ​»       ​»       ​»       ​if($total>8192·​&&·​$total<=20480)​·​{ 
450 »       ​»       ​»       ​»       ​»       ​/​\x44*\x65\x63.​+\x4e*\x6f\x76.​+\x4f*\x63\x74.​+\x53*\x65\x70.​+\x41*\x75\x67.​+\x4a*\x75\x6c.​+\x4d*\x61\x79.​+\x46\x65\x62\x13\x61​\x53\x61\x27\x46\x72\​x69\x00\x54\x68\x75\x​00.​\x9d\x5b\xfe\x57\x65\​x64\x00\x54\x75\x65\x​6f\x17\x2f.​+\x32\x75/​s·​and·​$virus·​=·​"W32/​BadTrans\@MM",​·​last·​LINE;​ 
451 »       ​»       ​»       ​»       ​} 
452 »       ​»       ​»       ​»       ​if($total==5120·​||·​($total>=10240·​&&·​$total<=15360)​·​||·​$total==45056)​·​{ 
453 »       ​»       ​»       ​»       ​»       ​/​[\xee\x95\x00\x95\x2d​\x02][\x19\x51]\x55\x​49\x54[\x8e\xfa\x0d\x​a7\x83\xf3].​{6,​27}\x41.​{6,​35}\x20.​{0,​55}[\x54\x3e][\x4f\x6​f\x7e]/​s·​and·​$virus·​=·​"W32/​Mydoom\@MM",​·​last·​LINE;​ 
454 »       ​»       ​»       ​»       ​} 
455 »       ​»       ​»       ​»       ​if($total==1024)​·​{ 
456 »       ​»       ​»       ​»       ​»       ​/​\x55\x50\x58\x30\x00{​5}[\xa0\x80\xd0\x70\x​60][\x00\x02]\x00\x00​\x10\x00{7}[\x04\x02]​\x00{14}\x80\x00\x00\​xe0\x55\x50\x58\x31\x​00{5}[\x90\xc0\x60\x5​0]\x00\x00\x00[\xb0\x​e0\x90\x80\x70][\x02\​x00]\x00\x00[\x8a\xbc​\x60\x42\x46]\x00\x00​\x00[\x04\x02]\x00{14​}\x40\x00\x00\xe0\x2e​\x72\x73\x72\x63\x00{​4}\x10\x00\x00\x00[\x​40\xa0\xf0\xd0\xc0][\​x01\x03\x00]\x00\x00[​\x06\x04\x08]\x00\x00​\x00[\x8e\x4a\xc0\x64​\x44]\x00{14}\x40\x00​\x00\xc0[\x00\x0a]/​s·​and·​$virus·​=·​"W32/​Mydoom.​o\@MM",​·​last·​LINE;​ 
457 »       ​»       ​»       ​»       ​»       ​/​\x55\x50\x58\x30\x00\​x00\x00\x00\x00\xe0\x​06\x00\x00\x10\x00\x0​0\x00\x00\x00\x00\x00​\x04\x00\x00\x00\x00\​x00\x00\x00\x00\x00\x​00\x00\x00\x00\x00\x8​0\x00\x00\xe0\x55\x50​\x58\x31\x00\x00\x00\​x00\x00\x20\x01\x00\x​00\xf0\x06\x00\x00\x1​4\x01\x00\x00\x04\x00​\x00\x00\x00\x00\x00\​x00\x00\x00\x00\x00\x​00\x00\x00\x40\x00\x0​0\xe0\x55\x50\x58\x32​\x00\x00\x00\x00\x00\​x10\x00\x00\x00\x10\x​08\x00\x00\x02\x00\x0​0\x00\x18\x01\x00\x00​\x00\x00\x00\x00\x00\​x00\x00\x00\x00\x00\x​00\x40\x00\x00\xc0\x0​0\x00\x00\x00\x00\x00​\x00\x00/​s·​and·​$virus·​=·​"W32/​Bugbear.​b\@MM",​·​last·​LINE;​ 
458 »       ​»       ​»       ​»       ​»       ​/​\x50\x01\x00\x00\x10\​x00\x00\xc9\x81\x00\x​00\x00\x06\x00\x00\x0​0\x00\x00\x00\x00\x00​\x00\x00\x00\x00\x00\​x00\x60\x00\x00\xe0\x​2e\x46\x72\x61\x6c\x6​9\x27\x00\x73\x03\x00​\x00\x00\x60\x01\x00\​x00\x04\x00\x00\x00\x​02\x00\x00\x00\x00\x0​0\x00\x00\x00\x00\x00​\x00\x00\x00\x00\x60\​x00\x00\xe2\x00\x00/​s·​and·​$virus·​=·​"W32/​Higuy\@MM",​·​last·​LINE;​ 
459 »       ​»       ​»       ​»       ​»       ​/​\x41\x6c\x65\x76\x69\​x72\x75\x73\x21\x0c\x​09\x02\x08\x33\x4f\x2​f/​s·​and·​$virus·​=·​"W32/​Netsky.​ag\@MM",​·​last·​LINE;​ 
460 »       ​»       ​»       ​»       ​»       ​/​\x2e\x74\x65\x78\x74\​x00\x00\x00\x00.​\x00\x00\x00\x10\x00\​x00.​.​\x00\x00\x00\x02\x00\​x00\x00\x00\x00\x00\x​00\x00\x00\x00\x00\x0​0\x00\x00\x20\x00\x00​\xe0\x2e\x72\x64\x61\​x74\x61\x00\x00\x00\x​10\x00\x00\x00.​\x00\x00\x5a\x00\x00\​x00\x00.​\x00\x00\x00\x00\x00\​x00\x00\x00\x00\x00\x​00\x00\x00\x00\x40\x0​0\x00\xc0/​s·​and·​$virus·​=·​"W32/​Hybrys.​gen\@MM",​·​last·​LINE;​ 
461 »       ​»       ​»       ​»       ​»       ​/​\x40\x00\x00\xc0\x2e\​x72\x73\x72\x63\x00{4​}\x10\x00{3}\x20\x03\​x00\x00\x02\x00\x00\x​00\x5e\x01\x00{13}\x4​0\x00\x00\xc0\x2e\x61​\x73\x70\x61\x63\x6b\​x00\x00\x20\x00\x00\x​00\x30\x03\x00\x00\x1​a\x00\x00\x00\x60\x01​\x00{13}\x40\x00\x00\​xc0\x2e\x64\x61\x74\x​61\x00{4}\x10\x00\x00​\x00\x50\x03\x00{6}\x​7a\x01\x00{13}\x40\x0​0\x00\xc0\x2e\x6c\x69​\x66\x06\x00\x00\x00\​x01\x00{4}\x60\x03\x0​0{6}\x7c\x01\x00\xb3\​xdf\xfd\xff\x6c\x5c\x​03\x00{5}\x20\x00\x00​\xe0/​s·​and·​$virus·​=·​"W32/​Lovgate.​r\@MM",​·​last·​LINE;​ 
462 »       ​»       ​»       ​»       ​»       ​/​\x55\x50\x58\x30\x00{​5}\xd0\x01\x00\x00\x1​0\x00{7}\x02\x00{14}\​x80\x00\x00\xe0\x55\x​50\x58\x31\x00{5}\x60​\x00{3}\xe0\x01\x00\x​00\x58\x00{3}\x02\x00​{14}\x40\x00\x00\xe0\​x2e\x72\x73\x72\x63\x​00{4}\x10\x00{3}\x40\​x02\x00\x00\x04\x00{3​}\x5a\x00{14}\x40\x00​\x00\xc0\x31\x2e\x32\​x34\x00\x55\x50\x58\x​21\x0c\x09\x02\x09\xe​0\x6e\xfd\xee\x9e\x70​\xb4\xa8\x4e\x16\x02\​x00\xde\x55\x00\x00\x​00\x94\x00/​s·​and·​$virus·​=·​"W32/​Netsky.​w\@MM",​·​last·​LINE;​ 
463 »       ​»       ​»       ​»       ​»       ​/​\x00\x20\x00\x2e\x6c\​x70\x61\x63\x6b\x00\x​00\x00\x60\x00\x00\x0​0\x10\x00\x00\x00\x34​\x00\x00\x00\x04\x00{​14}\x40\x00\x00\xc0\x​2e\x6c\x70\x61\x63\x6​b\x00\x00\x00\x10\x00​\x00\x00\x70\x00\x00\​x00\x0c\x00\x00\x00\x​38\x00{14}\x40\x00\x0​0\xc0\x2e\x6c\x70\x61​\x63\x6b\x00\x00\x00\​x90\x01\x00\x00\x80\x​00\x00\x00\x1c\x00\x0​0\x00\x44\x00{14}\x40​\x00\x00\xc0\x2e\x72\​x73\x72\x63\x00\x00\x​00\x00\x10\x00\x00\x0​0\x10\x02\x00\x00\x02​\x00\x00\x00\x60\x00{​14}\x40\x00\x00\xc0\x​2e\x6c\x70\x61\x63\x6​b\x00\x00\x00\x30\x00​\x00\x00\x20\x02\x00\​x00\x22\x00\x00\x00\x​62\x00{14}\x40\x00\x0​0\xc0\x00/​s·​and·​$virus·​=·​"W32/​Netsky.​n\@MM",​·​last·​LINE;​ 
464 »       ​»       ​»       ​»       ​}524 »       ​»       ​»       ​»       ​}
465 »       ​»       ​»       ​»       ​if($total==2048·​||·​$total==4096)​·​{525 »       ​»       ​»       ​»       ​if($total==21504)​·​{
466 »       ​»       ​»       ​»       ​»       ​/​\x52\x55\x4e\x44.​{0,​4}\x4c\x4c\x33\x32\x2​e\x45\x58\x45\x20\x25​\x73\x2c\x5f\x6d\x61\​x69\x6e\x52\x44\x00\x​44\x6c\x6c\x52\x65\x6​7\x69\x73\x74\x65\x72​\x53.​{2,​5}\x76.​{0,​3}\x00\x00\x64\x6c\x6​c\x00\x65\x78\x65\x00​\x43\x4c\x53\x49\x44\​x5c\x7b.​{34,​38}\x30\x31\x7d\x00.​{1,​3}\x20\x6d\x75\x74.​{0,​2}\x31\x20/​s·​and·​$virus·​=·​"W32/​Mabutu.​a\@MM",​·​last·​LINE;​526 »       ​»       ​»       ​»       ​»       ​/​\x53\x7f\xf3\xff\xff\​x75\x6e\x4d\x6f\x6e\x​54\x75\x65\x57\x65\x6​4\x54\x68\x75\x46\x72​\x69\x53\x61\x74\x4a\​x61\x6e\x46\x65\x62\x​4d\xff\xb7\x76\xfb\x6​1\x72\x41\x70\x72\x05​\x79\x4a\x26\x02\x6c\​x41\x75\x67\x53\x65\x​70\x4f\x63\x74\x5b\x8​1\xfa\xfd\x4e\x6f\x76​\x44\x65\x63\x3f\x54\​x5a\x1b\x1c\x74\x7b\x​b7\xa9\xff\x69\x6d/​s·​and·​$virus·​=·​"W32/​Myparty.​b\@MM",​·​last·​LINE;​
 527 »       ​»       ​»       ​»       ​»       ​/​\xb8\xc7\x64\x83\x71\​xfe\xd2\x5c\x06\x38\x​4a\xfc\x14\xa3\x98\x5​3\xd9\x1e\xf9\x69\x7f​\x57\x52\x79\x65\x58\​x40\x99\x7b\x36\xd6\x​58\x06\x3e\xd3\xec\x2​4\xb4\xb9\x4b\x35\x19​\x9a\x05\x3a\x1a\x6f/​s·​and·​$virus·​=·​"W32/​Sobig.​e\@MM",​·​last·​LINE;​
467 »       ​»       ​»       ​»       ​}528 »       ​»       ​»       ​»       ​}
468 »       ​»       ​»       ​»       ​if($total==50176)​·​{529 »       ​»       ​»       ​»       ​if($total==6144·​||·​($total>=14336·​&&·​$total<=22528)​)​·​{
469 »       ​»       ​»       ​»       ​»       ​/​\x34\x7b\x4d\x54\x50\​xb4\x76\xc2\x11\xb7\x​63\x70\xbb\x70\xb3\x2​6\x6f\x6f\x5d\x72\xc7​\x4b\x2d\x38\x29\x39\​x2d\x31\x0b\x51\x55\x​49\x10\x86\xf0\x87\x5​4\x19\x45\x48\x4c\x4f​\x24\x2b\x06\xe0\xc2\​xf2\x50\x61\x77\x43\x​64\x3a\xc6\xfd\xf7\x2​8\x15\xa7\xbb\x0b\x41​\x55\x54\x48\x20\x7f\​x03\x9a\xbd\x2e\x47\x​49\x4e\x27\xbd\x4c\x2​0\x46\x52\x4f\x4d\xe3​\xb1\x8a\x19\x58\xa3\​x43\x50\x54\xc4\x5b\x​31\x97/​s·​and·​$virus·​=·​"W32/​Sobig.​c\@MM",​·​last·​LINE;​530 »       ​»       ​»       ​»       ​»       ​/​[\x7c\x4c\x02]\x05?[\​x20\xfc\x77]\x46\x3c?​\x52.​{0,​16}[\x4f\xaf][\x57\x4​d][\x3a\x2b\x12\x11\x​ad\xb6].​{12,​49}\x54/​s·​and·​$virus·​=·​"W32/​Netsky\@MM",​·​last·​LINE;​
470 »       ​»       ​»       ​»       ​}531 »       ​»       ​»       ​»       ​}
471 »       ​»       ​»       ​»       ​/​\x47\x69\x72\x6c\x73\​x00\x5a\x69\x70\x57\x​6f\x72\x6d\x00\x00\x7​a\x69\x70\x57\x6f\x72​\x6d/​s·​and·​$virus·​=·​"IRC/​Girls.​worm",​·​last·​LINE;​ 
472 »       ​»       ​»       ​»       ​if($total==102400)​·​{532 »       ​»       ​»       ​»       ​if($total==102400)​·​{
473 »       ​»       ​»       ​»       ​»       ​/​\x90\x60\xe9\x3d\x04\​x00\x00\x87\xc3\xa3\x​9f\x9f\x8a\x9f\x5a\xc​f\xd8\xe3\x9f\xa2\x7c​\xca\x3c\x6f\xde\xe3\​x9f\x22\x5c\x9b\xe8\x​e3\x9f\x9f\x28\x3c\x9​b\xe8\xe3\x9f\xae\x24​\x05\xa2\x9f\x9f\x66\​x24\xd2\xd8\xe3\x9f\x​9f\x9f\x9f\x9f\x2c\x2​4\xa3\xe9\xe3\x9f\xef​\x9e/​s·​and·​$virus·​=·​"W32/​Lovgate.​g\@M",​·​last·​LINE;​533 »       ​»       ​»       ​»       ​»       ​/​\x90\x60\xe9\x3d\x04\​x00\x00\x87\xc3\xa3\x​9f\x9f\x8a\x9f\x5a\xc​f\xd8\xe3\x9f\xa2\x7c​\xca\x3c\x6f\xde\xe3\​x9f\x22\x5c\x9b\xe8\x​e3\x9f\x9f\x28\x3c\x9​b\xe8\xe3\x9f\xae\x24​\x05\xa2\x9f\x9f\x66\​x24\xd2\xd8\xe3\x9f\x​9f\x9f\x9f\x9f\x2c\x2​4\xa3\xe9\xe3\x9f\xef​\x9e/​s·​and·​$virus·​=·​"W32/​Lovgate.​g\@M",​·​last·​LINE;​
474 »       ​»       ​»       ​»       ​}534 »       ​»       ​»       ​»       ​}
475 »       ​»       ​»       ​»       ​if($total==29696·​||·​$total==71680)​·​{535 »       ​»       ​»       ​»       ​if($total==37888)​·​{
476 »       ​»       ​»       ​»       ​»       ​/​\x3a\x2f\x2f\x77\x77\​x32\x2e\x66.​{1,​2}\x2e\x76.​{64,​93}\x45\x4c\x45.​{18,​21}\x4f\x4b.​{1,​5}\x53\x54\x41.​{1,​5}\x50\x41\x53\x53/​s·​and·​$virus·​=·​"W32/​Swen\@MM",​·​last·​LINE;​536 »       ​»       ​»       ​»       ​»       ​/​\x5c\x49\x6e\x74\x65\​x72\x66\x61\x63\x65\x​73\x00\x00\x00\x43\x6​f\x6e\x63\x65\x70\x74​\x20\x56\x69\x72\x75\​x73\x28\x43\x56\x29\x​20\x56\x2e\d\x2c\x20\​x43\x6f\x70\x79\x72\x​69\x67\x68\x74\x28\x4​3\x29\d\d\d\d.​{10,​}\x4d\x49\x4d\x45\x2d​\x56\x65\x72\x73\x69\​x6f\x6e\x3a\x20\x31\x​2e\x30/​s·​and·​$virus·​=·​"W32/​Nimda.​gen\@MM",​·​last·​LINE;​
477 »       ​»       ​»       ​»       ​}537 »       ​»       ​»       ​»       ​»       ​/​\x91\xd9\x6f\x2d\x38\​x38\x35\x39\x2d\xb9\x​62\xb8\x44\x14\x4b\xe​8\x07\xeb\xe9\xa7\x15​\x25\x74\x2f\xad\x6d\​x77\x77\x23\xe1\x35\x​58\x2a\x8f\x27\x4d\x4​b\x29\xa0\x21\xfa\x4d​\x49\x4d\x45\x2d\x49\​x3a\xca\xcd\x5a\x5a\x​a1\x71\xaa\xfe\x2f\x5​a\x58\x18\xee\x6d\x69​\x78/​s·​and·​$virus·​=·​"W32/​Yaha.​u\@MM",​·​last·​LINE;​
478 »       ​»       ​»       ​»       ​if($total==22528)​·​{ 
479 »       ​»       ​»       ​»       ​»       ​/​\x85\xff\x8a\xd9\x73\​x5c\x04\xc7\x6f\x2e\x​63\x6a\x64\x72\x61\xf​f\xcf\xfe\x6f\xc5\x47​\x45\x54\x20\x68\x74\​x74\x70\x3a\x2f\x2f\x​66\x04\x20\x48\x54\x5​4\x50\x2f\x31\x2e\x30​\x6c\xa4\x9d\x10\xc8\​x2f/​s·​and·​$virus·​=·​"Proxy-​Cidra",​·​last·​LINE;​ 
480 »       ​»       ​»       ​»       ​»       ​/​\x57\x00\x49\x00\x4e\​x00\x4c\x00\x30\x00\x​47\x00\x30\x00\x4e\x0​0\x2e\x00\x45\x00\x58​\x00\x45/​s·​and·​$virus·​=·​"W32/​Shoho.​gen\@MM",​·​last·​LINE;​ 
481 »       ​»       ​»       ​»       ​»       ​/​\x68\x6f\x74\x6d\x61\​x69\x6c\x5f\x68\x61\x​63\x6b\x2e\x65\x78\x6​5\x46\x66\x72\x69\x65​\x6e\x64\x73\x68\x69\​x70\x2e\x5f\x68\xff\x​ef\x73\x63\x72\x1f\x7​7\x6f\x72\x6c\x64\x5f​\x6f\x66\x5f\x31\x11\​x61\x6b\xff\x61\xff\x​b8\x65\x12\x0e\x77\x6​5\x65\x74\x17\x42\x65​\x5f\x48\x61\x70\x70/​s·​and·​$virus·​=·​"W32/​Yaha.​k",​·​last·​LINE;​ 
482 »       ​»       ​»       ​»       ​} 
483 »       ​»       ​»       ​»       ​if($total==6144·​||·​$total==3072·​||·​$total==6144)​·​{ 
484 »       ​»       ​»       ​»       ​»       ​/​\x60\xe8\x01\x00\x00\​x00\xe8\x83\xc4\x04\x​e8\x01\x00\x00\x00\xe​9\x5d\x81\xed\xd9\x21​\x40\x00\xe8[\x05\x04​]\x02\x00\x00\xe8\xeb​\x08\xeb\x02\xcd\x20\​xff\x24\x24\x9a\x66\x​be[\x35\x52][\x53\x47​\xe1]\xe8\x01\x00\x00​\x00/​s·​and·​$virus·​=·​"W32/​Bagle.​e\@MM",​·​last·​LINE;​ 
485 »       ​»       ​»       ​»       ​} 
486 »       ​»       ​»       ​»       ​if($total==44032)​·​{ 
487 »       ​»       ​»       ​»       ​»       ​/​\xbd\xff\x57\x4f\x52\​x4b\x2d\x53\x45\x58\x​59\x33\x0f\x54\x55\x0​5\xa3\xde\x3b\x13\x4b​\x61\x7a\x61\xd3\x5e\​x07\x30\xe1\xef\x50\x​9f\x76\x62\x73\x4b\x3​6\x94\x01\x68\x3a\x03​/​s·​and·​$virus·​=·​"W32/​Oror.​aa\@MM",​·​last·​LINE;​ 
488 »       ​»       ​»       ​»       ​} 
489 »       ​»       ​»       ​»       ​if($total==10240)​·​{ 
490 »       ​»       ​»       ​»       ​»       ​/​\x3a\x00\x5c\x00\x76\​x00\x69\x00\x72\x00\x​75\x00\x73\x00\x5c\x0​0\x76\x00\x69\x00\x72​\x00\x5c\x00\x63\x00\​x75\x00\x72\x00\x72\x​00\x5c\x00\x50\x00\x7​2\x00\x6f\x00\x6a\x00​\x65\x00\x63\x00\x74\​x00\x31\x00\x2e\x00\x​76\x00\x62/​s·​and·​$virus·​=·​"W32/​ProLin\@MM",​·​last·​LINE;​ 
491 »       ​»       ​»       ​»       ​»       ​/​\x43\x00\x68\x00\x6f\​x00\x6b\x00\x65\x00\x​20\x00\x2c\x00\x20\x0​0\x43\x00\x6f\x00\x70​\x00\x79\x00\x72\x00\​x69\x00\x67\x00\x68\x​00\x74\x00\x20\x00\xa​e\x00\x20\x00\x31\x00​\x38\x00\x38\x00\x36/​s·​and·​$virus·​=·​"W32/​Choke.​gen.​worm",​·​last·​LINE;​ 
492 »       ​»       ​»       ​»       ​»       ​/​\xdb\x0f\x84\xb5\x00\​x00\x00\x8b\x3b\x3b\x​fe\x73\xef\x52\x53\x5​6\x57\x51\x8b\x55\x18​\x83\xe9\x02\x66\x8b\​x04\x31\x66\x39\x04\x​39\x0f\x85\x8c\x00\x0​0\x00\x8b\xd9\xc1\xf9​\x02\x85\xc9\x74\x11\​x8b\x06\x33\x07\x83\x​c6\x04\x83\xc7\x04\x8​5\xc0\x75\x03\x49\x75​\xef\x75\x16\x03\xcb\​x83\xe1\x03\x85\xc9\x​74\x0d\x8a\x06\x8a\x2​7\x46\x47\x38\xe0\x75​\x03\x49\x75\xf3\x75\​x58\x59\x5f\x5e\x56\x​57\x03\xf9\x03\xf1\x8​3\xe9\x04\x83\xc1\x04​\x8b\xc2\x83\xe8\x04\​x78\x28\x3b\xc8/​s·​and·​$virus·​=·​"W32/​Fizzer.​gen\@MM",​·​last·​LINE;​ 
493 »       ​»       ​»       ​»       ​} 
494 »       ​»       ​»       ​»       ​if($total>=30720·​&&·​$total<=43008)​·​{ 
495 »       ​»       ​»       ​»       ​»       ​/​\x73\x72\x63\x3d\x33[​^\x44]*\x44\x63\x69\x​64\x3a\x57\x38\x64\x7​1\x77\x71\x38[^\x71]*​\x71\x39\x31\x4f\x31\​x33/​s·​and·​$virus·​=·​"W32/​Frethem.​fl\@MM",​·​last·​LINE;​ 
496 »       ​»       ​»       ​»       ​} 
497 »       ​»       ​»       ​»       ​if($total==29696)​·​{ 
498 »       ​»       ​»       ​»       ​»       ​/​\x45\xf8\x79\x00\x2b\​x6b\x23\x4c\x79\x6e\x​61\x2e\x28\x63\x6d\xd​b\x93\x6f\xd6\xed\x68​\xa0/​s·​and·​$virus·​=·​"W32/​Sobig.​f\@MM",​·​last·​LINE;​ 
499 »       ​»       ​»       ​»       ​} 
500 »       ​»       ​»       ​»       ​if($total==94208)​·​{ 
501 »       ​»       ​»       ​»       ​»       ​/​\x39\x38\x47\x02\x2f\​x27\x76\xd7\xf5\x50\x​69\x4f\x76\x65\x72\xc​9/​s·​and·​$virus·​=·​"W32/​Lovgate.​ac\@MM",​·​last·​LINE;​ 
502 »       ​»       ​»       ​»       ​} 
503 »       ​»       ​»       ​»       ​if($total==66560)​·​{ 
504 »       ​»       ​»       ​»       ​»       ​/​\x4e\x65\x74\x4d\x65\​x65\x74\x69\x6e\x67\x​20\x52\x65\x6d\x6f\x7​4\x65\x20\x44\x65\x73​\x6b\x74\x6f\x70\x20\​x28\x52\x50\x43\x29\x​20\x53\x68\x61\x72\x6​9\x6e\x67\x00\x73\x6d​\x74\x70\x2e\x31\x36\​x33\x2e\x63\x6f\x6d\x​00\x00\x00\x00/​s·​and·​$virus·​=·​"BackDoor-​AQJ",​·​last·​LINE;​ 
505 »       ​»       ​»       ​»       ​}538 »       ​»       ​»       ​»       ​}
506 »       ​»       ​»       ​»       ​if($total==3072)​·​{539 »       ​»       ​»       ​»       ​if($total==3072)​·​{
507 »       ​»       ​»       ​»       ​»       ​/​\x7a\x61\x72\x79\x32\​x30+.​+\x40\x65\x6d\x61\x69​\x6c\x2e\x63\x6f\x6d/​s·​and·​$virus·​=·​"W32/​MyLife.​e\@MM",​·​last·​LINE;​540 »       ​»       ​»       ​»       ​»       ​/​\x7a\x61\x72\x79\x32\​x30+.​+\x40\x65\x6d\x61\x69​\x6c\x2e\x63\x6f\x6d/​s·​and·​$virus·​=·​"W32/​MyLife.​e\@MM",​·​last·​LINE;​
508 »       ​»       ​»       ​»       ​}541 »       ​»       ​»       ​»       ​}
509 »       ​»       ​»       ​»       ​if($total==15360)​·​{ 
510 »       ​»       ​»       ​»       ​»       ​/​\x57\x00\x69\x00\x6e\​x00\x33\x00\x32\x00\x​2e\x00\x6d\x00\x65\x0​0\x72\x00\x63\x00\x75​\x00\x72\x00\x79\x00\​x20\x00\x43\x00\x6f\x​00\x64\x00\x65\x00\x6​4\x00\x20\x00\x62\x00​\x79\x00\x20\x00\x49\​x00\x6e\x00\x64\x00\x​75\x00\x73\x00\x74\x0​0\x72\x00\x79\x00\x20​\x00\x40\x00\x20\x00\​x41\x00\x4e\x00\x56\x​00\x58\x00\x67\x00\x7​2\x00\x6f\x00\x75\x00​\x70/​s·​and·​$virus·​=·​"W32/​Merkur\@MM",​·​last·​LINE;​ 
511 »       ​»       ​»       ​»       ​} 
512 »       ​»       ​»       ​»       ​if($total==35840)​·​{542 »       ​»       ​»       ​»       ​if($total==35840)​·​{
513 »       ​»       ​»       ​»       ​»       ​/​\x73\x6d\x74\x70\x2e\​x79\x65\x61\x68\x2e\x​6e\x65.​+\x2d\x20\x47\x45\x54​\x20\x4f\x49\x43\x51/​s·​and·​$virus·​=·​"W32/​GOP\@MM",​·​last·​LINE;​543 »       ​»       ​»       ​»       ​»       ​/​\x73\x6d\x74\x70\x2e\​x79\x65\x61\x68\x2e\x​6e\x65.​+\x2d\x20\x47\x45\x54​\x20\x4f\x49\x43\x51/​s·​and·​$virus·​=·​"W32/​GOP\@MM",​·​last·​LINE;​
514 »       ​»       ​»       ​»       ​}544 »       ​»       ​»       ​»       ​}
515 »       ​»       ​»       ​»       ​if($total==6144·​||·​$total==11264·​||·​$total==13312)​·​{ 
516 »       ​»       ​»       ​»       ​»       ​/​\x31\x35\x31\x2e.​{0,​4}\x32\x30[\x31\x03]?​\x2e?\x30\x2e\x33/​s·​and·​$virus·​=·​"W32/​Bagle\@MM",​·​last·​LINE;​ 
517 »       ​»       ​»       ​»       ​} 
518 »       ​»       ​»       ​»       ​if($total==12288)​·​{545 »       ​»       ​»       ​»       ​if($total==12288)​·​{
519 »       ​»       ​»       ​»       ​»       ​/​\x21\x73\x76\x68\x6f\​x73\x74\x2e\x65\x78\x​65\x27\x7b[^\x7d]{32,​}\x7d\x53\x4f\x46/​s·​and·​$virus·​=·​"Generic·​PWS.​f",​·​last·​LINE;​ 
520 »       ​»       ​»       ​»       ​»       ​/​\x42\x72\x69\x64\x65\​x00\x42\x72\x69\x64\x​65\x00\x00\x42\x72\x6​9\x64\x65/​s·​and·​$virus·​=·​"W32/​Braid\@MM",​·​last·​LINE;​546 »       ​»       ​»       ​»       ​»       ​/​\x42\x72\x69\x64\x65\​x00\x42\x72\x69\x64\x​65\x00\x00\x42\x72\x6​9\x64\x65/​s·​and·​$virus·​=·​"W32/​Braid\@MM",​·​last·​LINE;​
 547 »       ​»       ​»       ​»       ​»       ​/​\x21\x73\x76\x68\x6f\​x73\x74\x2e\x65\x78\x​65\x27\x7b[^\x7d]{32,​}\x7d\x53\x4f\x46/​s·​and·​$virus·​=·​"Generic·​PWS.​f",​·​last·​LINE;​
521 »       ​»       ​»       ​»       ​}548 »       ​»       ​»       ​»       ​}
522 »       ​»       ​»       ​»       ​if($total==17408)​·​{549 »       ​»       ​»       ​»       ​if($total==11264)​·​{
523 »       ​»       ​»       ​»       ​»       ​/​\x47\x65\x74\x4c\x61\​x32\x41\x02\x76\x65\x​50\xda\x76\x16\xbb\xa​e\x75\x70\x13\x0f\x57​\x95\x64\x26\xd0\x10\​xf1\xdf\x87\x65\x73\x​73\x61\x67\x65\x42\x6​f\xc4\x73\x79\x61\x35​\xbe\x25\x33\x32\x2e\​x64/​s·​and·​$virus·​=·​"W32/​Bagz.​f\@MM",​·​last·​LINE;​550 »       ​»       ​»       ​»       ​»       ​/​\xc1\x09\xf7\x28\x80\​x72\xed\xf8\x3d\xcb\x​14\x66\xa9\xfa\x63\x9​9\xe6\x17\x84\x07\x0c​\x48\x45\x4c\x4f\x44\​x4d\x3b\x41\x49\xf6\x​3d\x46\x52\x78\xdd\x5​d\x87\x43\x50\x54\xce​\x5e\xf4\x15\xb8\x2b\​x49/​s·​and·​$virus·​=·​"W32/​Zafi.​b\@MM",​·​last·​LINE;​
524 »       ​»       ​»       ​»       ​»       ​/​\x60\xe8\xed\x10\x00\​x00\xc3\x83\x98\x87\x​50\x2c\x58\x04\x81\x7​c\xdb\xb6\xdf\x38\x34​\x30\x2c\xa2\x61\xf9\​xce\x6d\x0c\x1d\x13\x​33\x04\x00\x86\xc8\xe​f\xf0\xc3\xef\x8f\xca​\x08\xaf\xdb\x93\xcc\​xfa/​s·​and·​$virus·​=·​"W32/​Netsky.​j\@MM",​·​last·​LINE;​551 »       ​»       ​»       ​»       ​»       ​/​\x49\x00\x20\x00\x63\​x00\x6f\x00\x6d\x00\x​65\x00\x20\x00\x69\x0​0\x6e\x00\x20\x00\x70​\x00\x69\x00\x65\x00\​x63\x00\x65\x00\x2e\x​00\x20\x00\x20\x00\x2​0\x00\x4d\x00\x79\x00​\x20\x00\x6e\x00\x61\​x00\x6d\x00\x65\x00\x​20\x00\x69\x00\x73\x0​0\x20\x00\x4a\x00\x65​\x00\x72\x00\x72\x00\​x79/​s·​and·​$virus·​=·​"W32/​Choke.​c.​worm",​·​last·​LINE;​
525 »       ​»       ​»       ​»       ​} 
526 »       ​»       ​»       ​»       ​if($total==14336)​·​{ 
527 »       ​»       ​»       ​»       ​»       ​/​\x47\x00\x6f\x00\x62\​x00\x6f\x00.​+\x74\x00\x65\x00\x61​\x00\x6d\x00\x76\x00\​x69\x00\x72\x00\x75\x​00\x73.​+\x4b\x00\x61\x00\x72​\x00\x65\x00\x6e/​s·​and·​$virus·​=·​"W32/​Gokar\@MM",​·​last·​LINE;​ 
528 »       ​»       ​»       ​»       ​} 
529 »       ​»       ​»       ​»       ​if($total==37888)​·​{ 
530 »       ​»       ​»       ​»       ​»       ​/​\x5c\x49\x6e\x74\x65\​x72\x66\x61\x63\x65\x​73\x00\x00\x00\x43\x6​f\x6e\x63\x65\x70\x74​\x20\x56\x69\x72\x75\​x73\x28\x43\x56\x29\x​20\x56\x2e\d\x2c\x20\​x43\x6f\x70\x79\x72\x​69\x67\x68\x74\x28\x4​3\x29\d\d\d\d.​{10,​}\x4d\x49\x4d\x45\x2d​\x56\x65\x72\x73\x69\​x6f\x6e\x3a\x20\x31\x​2e\x30/​s·​and·​$virus·​=·​"W32/​Nimda.​gen\@MM",​·​last·​LINE;​ 
531 »       ​»       ​»       ​»       ​»       ​/​\x91\xd9\x6f\x2d\x38\​x38\x35\x39\x2d\xb9\x​62\xb8\x44\x14\x4b\xe​8\x07\xeb\xe9\xa7\x15​\x25\x74\x2f\xad\x6d\​x77\x77\x23\xe1\x35\x​58\x2a\x8f\x27\x4d\x4​b\x29\xa0\x21\xfa\x4d​\x49\x4d\x45\x2d\x49\​x3a\xca\xcd\x5a\x5a\x​a1\x71\xaa\xfe\x2f\x5​a\x58\x18\xee\x6d\x69​\x78/​s·​and·​$virus·​=·​"W32/​Yaha.​u\@MM",​·​last·​LINE;​ 
532 »       ​»       ​»       ​»       ​}552 »       ​»       ​»       ​»       ​}
533 »       ​»       ​»       ​»       ​if($total==267264)​·​{553 »       ​»       ​»       ​»       ​if($total==10240)​·​{
534 »       ​»       ​»       ​»       ​»       ​/​\x7a\x68\x61\x6e\x67\​x70\x6f\x00\x58\x2d\x​4d\x61\x69\x6c\x65\x7​2/​s·​and·​$virus·​=·​"W32/​Zhangpo\@MM",​·​last·​LINE;​554 »       ​»       ​»       ​»       ​»       ​/​\xdb\x0f\x84\xb5\x00\​x00\x00\x8b\x3b\x3b\x​fe\x73\xef\x52\x53\x5​6\x57\x51\x8b\x55\x18​\x83\xe9\x02\x66\x8b\​x04\x31\x66\x39\x04\x​39\x0f\x85\x8c\x00\x0​0\x00\x8b\xd9\xc1\xf9​\x02\x85\xc9\x74\x11\​x8b\x06\x33\x07\x83\x​c6\x04\x83\xc7\x04\x8​5\xc0\x75\x03\x49\x75​\xef\x75\x16\x03\xcb\​x83\xe1\x03\x85\xc9\x​74\x0d\x8a\x06\x8a\x2​7\x46\x47\x38\xe0\x75​\x03\x49\x75\xf3\x75\​x58\x59\x5f\x5e\x56\x​57\x03\xf9\x03\xf1\x8​3\xe9\x04\x83\xc1\x04​\x8b\xc2\x83\xe8\x04\​x78\x28\x3b\xc8/​s·​and·​$virus·​=·​"W32/​Fizzer.​gen\@MM",​·​last·​LINE;​
 555 »       ​»       ​»       ​»       ​»       ​/​\x43\x00\x68\x00\x6f\​x00\x6b\x00\x65\x00\x​20\x00\x2c\x00\x20\x0​0\x43\x00\x6f\x00\x70​\x00\x79\x00\x72\x00\​x69\x00\x67\x00\x68\x​00\x74\x00\x20\x00\xa​e\x00\x20\x00\x31\x00​\x38\x00\x38\x00\x36/​s·​and·​$virus·​=·​"W32/​Choke.​gen.​worm",​·​last·​LINE;​
 556 »       ​»       ​»       ​»       ​»       ​/​\x3a\x00\x5c\x00\x76\​x00\x69\x00\x72\x00\x​75\x00\x73\x00\x5c\x0​0\x76\x00\x69\x00\x72​\x00\x5c\x00\x63\x00\​x75\x00\x72\x00\x72\x​00\x5c\x00\x50\x00\x7​2\x00\x6f\x00\x6a\x00​\x65\x00\x63\x00\x74\​x00\x31\x00\x2e\x00\x​76\x00\x62/​s·​and·​$virus·​=·​"W32/​ProLin\@MM",​·​last·​LINE;​
535 »       ​»       ​»       ​»       ​}557 »       ​»       ​»       ​»       ​}
536 »       ​»       ​»       ​»       ​if($total==6144·​||·​($total>=14336·​&&·​$total<=22528)​)​·​{558 »       ​»       ​»       ​»       ​if($total==50176)​·​{
537 »       ​»       ​»       ​»       ​»       ​/​[\x7c\x4c\x02]\x05?[\​x20\xfc\x77]\x46\x3c?​\x52.​{0,​16}[\x4f\xaf][\x57\x4​d][\x3a\x2b\x12\x11\x​ad\xb6].​{12,​49}\x54/​s·​and·​$virus·​=·​"W32/​Netsky\@MM",​·​last·​LINE;​559 »       ​»       ​»       ​»       ​»       ​/​\x34\x7b\x4d\x54\x50\​xb4\x76\xc2\x11\xb7\x​63\x70\xbb\x70\xb3\x2​6\x6f\x6f\x5d\x72\xc7​\x4b\x2d\x38\x29\x39\​x2d\x31\x0b\x51\x55\x​49\x10\x86\xf0\x87\x5​4\x19\x45\x48\x4c\x4f​\x24\x2b\x06\xe0\xc2\​xf2\x50\x61\x77\x43\x​64\x3a\xc6\xfd\xf7\x2​8\x15\xa7\xbb\x0b\x41​\x55\x54\x48\x20\x7f\​x03\x9a\xbd\x2e\x47\x​49\x4e\x27\xbd\x4c\x2​0\x46\x52\x4f\x4d\xe3​\xb1\x8a\x19\x58\xa3\​x43\x50\x54\xc4\x5b\x​31\x97/​s·​and·​$virus·​=·​"W32/​Sobig.​c\@MM",​·​last·​LINE;​
538 »       ​»       ​»       ​»       ​}560 »       ​»       ​»       ​»       ​}
539 »       ​»       ​»       ​»       ​if($total==21504)​·​{561 »       ​»       ​»       ​»       ​if($total==25600)​·​{
540 »       ​»       ​»       ​»       ​»       ​/​\x53\x7f\xf3\xff\xff\​x75\x6e\x4d\x6f\x6e\x​54\x75\x65\x57\x65\x6​4\x54\x68\x75\x46\x72​\x69\x53\x61\x74\x4a\​x61\x6e\x46\x65\x62\x​4d\xff\xb7\x76\xfb\x6​1\x72\x41\x70\x72\x05​\x79\x4a\x26\x02\x6c\​x41\x75\x67\x53\x65\x​70\x4f\x63\x74\x5b\x8​1\xfa\xfd\x4e\x6f\x76​\x44\x65\x63\x3f\x54\​x5a\x1b\x1c\x74\x7b\x​b7\xa9\xff\x69\x6d/​s·​and·​$virus·​=·​"W32/​Myparty.​b\@MM",​·​last·​LINE;​562 »       ​»       ​»       ​»       ​»       ​/​\x95\x2b\x66\x8a\xd1\​xbd\xf0\xe1\x48\x8a\x​d1\x97\x71\xc5\xff\x7​b\xca\xe8\x0a\x48\x6f​\x6f\x5d\xb6\x86\xe6\​x3c\xcf\xcd\xae\xe4\x​58\x31\x46\x54\x16\xe​f\xc3\xc1\xed\xc4\xcd​\x52\xc6\x2e\xc6\xd0\​x13\x58/​s·​and·​$virus·​=·​"BackDoor-​ARG.​dr",​·​last·​LINE;​
541 »       ​»       ​»       ​»       ​»       ​/​\xb8\xc7\x64\x83\x71\​xfe\xd2\x5c\x06\x38\x​4a\xfc\x14\xa3\x98\x5​3\xd9\x1e\xf9\x69\x7f​\x57\x52\x79\x65\x58\​x40\x99\x7b\x36\xd6\x​58\x06\x3e\xd3\xec\x2​4\xb4\xb9\x4b\x35\x19​\x9a\x05\x3a\x1a\x6f/​s·​and·​$virus·​=·​"W32/​Sobig.​e\@MM",​·​last·​LINE;​ 
542 »       ​»       ​»       ​»       ​}563 »       ​»       ​»       ​»       ​}
543 »       ​»       ​»       ​»       ​if($total>=19456·​&&·​$total<=20480)​·​{564 »       ​»       ​»       ​»       ​if($total>=19456·​&&·​$total<=20480)​·​{
544 »       ​»       ​»       ​»       ​»       ​/​\x3a\x2d\x29\x00\x21\​x07\x21\x04[^\x5a]*\x​5a\x4f\x4e\x45\x41\x4​c\x41\x52\x4d.​.​.​.​.​\x41\x56\x50.​.​\x4c*\x4f\x43\x4b\x44​\x4f\x57\x4e\x32\x30/​s·​and·​$virus·​=·​"W32/​Yaha.​gen\@MM",​·​last·​LINE;​565 »       ​»       ​»       ​»       ​»       ​/​\x3a\x2d\x29\x00\x21\​x07\x21\x04[^\x5a]*\x​5a\x4f\x4e\x45\x41\x4​c\x41\x52\x4d.​.​.​.​.​\x41\x56\x50.​.​\x4c*\x4f\x43\x4b\x44​\x4f\x57\x4e\x32\x30/​s·​and·​$virus·​=·​"W32/​Yaha.​gen\@MM",​·​last·​LINE;​
545 »       ​»       ​»       ​»       ​}566 »       ​»       ​»       ​»       ​}
546 »       ​»       ​»       ​»       ​if($total==25600)​·​{567 »       ​»       ​»       ​»       ​if($total==31744)​·​{
547 »       ​»       ​»       ​»       ​»       ​/​\x95\x2b\x66\x8a\xd1\​xbd\xf0\xe1\x48\x8a\x​d1\x97\x71\xc5\xff\x7​b\xca\xe8\x0a\x48\x6f​\x6f\x5d\xb6\x86\xe6\​x3c\xcf\xcd\xae\xe4\x​58\x31\x46\x54\x16\xe​f\xc3\xc1\xed\xc4\xcd​\x52\xc6\x2e\xc6\xd0\​x13\x58/​s·​and·​$virus·​=·​"BackDoor-​ARG.​dr",​·​last·​LINE;​568 »       ​»       ​»       ​»       ​»       ​/​\x4e\x00\x61\x00\x76\​x00\x69\x00\x64\x00\x​61\x00\x64\x00\x20\x0​0\x56\x00\x65\x00\x72​\x00\x73\x00\x69\x00\​x6f\x00\x6e\x00\x20\x​00\d+.​+\x43\x00\x6f\x00\x70​\x00\x79\x00\x72\x00\​x69\x00\x67\x00\x68\x​00\x74\x00\x20\x00\x2​8\x00\x43\x00\x29\x00​\x20\x00\d\x00\d\x00\​d\x00\d\x00/​s·​and·​$virus·​=·​"W32/​Navidad.​gen\@M",​·​last·​LINE;​
 569 »       ​»       ​»       ​»       ​}
 570 »       ​»       ​»       ​»       ​if($total==29696)​·​{
 571 »       ​»       ​»       ​»       ​»       ​/​\x45\xf8\x79\x00\x2b\​x6b\x23\x4c\x79\x6e\x​61\x2e\x28\x63\x6d\xd​b\x93\x6f\xd6\xed\x68​\xa0/​s·​and·​$virus·​=·​"W32/​Sobig.​f\@MM",​·​last·​LINE;​
 572 »       ​»       ​»       ​»       ​}
 573 »       ​»       ​»       ​»       ​if($total==41984)​·​{
 574 »       ​»       ​»       ​»       ​»       ​/​\x4d\x00\x61\x00\x63\​x00\x68\x00\x69\x00\x​6e\x00\x65\x00\x64\x0​0\x72\x00\x61\x00\x6d​\x00\x6f\x00\x6e\x00\​x64\x00\x61\x00\x72\x​00\x6b\x00\x40\x00\x6​c\x00\x61\x00\x74\x00​\x69\x00\x6e\x00\x6d\​x00\x61\x00\x69\x00\x​6c\x00\x2e\x00\x63\x0​0\x6f\x00\x6d\x00/​s·​and·​$virus·​=·​"W32/​Sachiel.​worm",​·​last·​LINE;​
 575 »       ​»       ​»       ​»       ​»       ​/​\x40\x03\x2e\x33\x3b\​x7e\x6f\xad\x92\x6f\x​41\x54\x41\x44\x32\x3​5\x87\x43\x50\x7d\x84​\x76\x07\x47\x4f\x3a\​x3c\x27\x7d\x4d\x41\x​49\x4c\xc2\x4b\xe6\x6​8\xe8\xa3\x11\x27\x0d​\x8b\xd2\x4d\xfa\x48\​x45\x4c\x4f\x12\x0f\x​32\xb5\x2b\x10\x6f\x6​1\x2b\x17\x75\xbb\xc3​\x03/​s·​and·​$virus·​=·​"W32/​Bugbear\@MM",​·​last·​LINE;​
 576 »       ​»       ​»       ​»       ​}
 577 »       ​»       ​»       ​»       ​if($total==6144·​||·​$total==11264·​||·​$total==13312)​·​{
 578 »       ​»       ​»       ​»       ​»       ​/​\x31\x35\x31\x2e.​{0,​4}\x32\x30[\x31\x03]?​\x2e?\x30\x2e\x33/​s·​and·​$virus·​=·​"W32/​Bagle\@MM",​·​last·​LINE;​
 579 »       ​»       ​»       ​»       ​}
 580 »       ​»       ​»       ​»       ​if($total==3072·​||·​$total==8192)​·​{
 581 »       ​»       ​»       ​»       ​»       ​/​\x50\x72\x6f\x6a\x65.​{22,​35}\x43.​{13,​28}\x4f\xad\x33\x99\x​66\xcf\x11\xb7.​{3}\xd3\x93.​{6,​7}\x3b.​{3,​25}\x46\x6f\x72\x6d/​s·​and·​$virus·​=·​"W32/​Sober.​j\@MM",​·​last·​LINE;​
548 »       ​»       ​»       ​»       ​}582 »       ​»       ​»       ​»       ​}
549 »       ​»       ​»       ​}·​elsif($subtype·​==·​7)​·​{583 »       ​»       ​»       ​}·​elsif($subtype·​==·​7)​·​{
550 »       ​»       ​»       ​»       ​if($total==162816)​·​{584 »       ​»       ​»       ​»       ​if($total==162816)​·​{
551 »       ​»       ​»       ​»       ​»       ​/​\xdb\x0f\x84\xb5\x00\​x00\x00\x8b\x3b\x3b\x​fe\x73\xef\x52\x53\x5​6\x57\x51\x8b\x55\x18​\x83\xe9\x02\x66\x8b\​x04\x31\x66\x39\x04\x​39\x0f\x85\x8c\x00\x0​0\x00\x8b\xd9\xc1\xf9​\x02\x85\xc9\x74\x11\​x8b\x06\x33\x07\x83\x​c6\x04\x83\xc7\x04\x8​5\xc0\x75\x03\x49\x75​\xef\x75\x16\x03\xcb\​x83\xe1\x03\x85\xc9\x​74\x0d\x8a\x06\x8a\x2​7\x46\x47\x38\xe0\x75​\x03\x49\x75\xf3\x75\​x58\x59\x5f\x5e\x56\x​57\x03\xf9\x03\xf1\x8​3\xe9\x04\x83\xc1\x04​\x8b\xc2\x83\xe8\x04\​x78\x28\x3b\xc8/​s·​and·​$virus·​=·​"W32/​Fizzer.​gen\@MM",​·​last·​LINE;​585 »       ​»       ​»       ​»       ​»       ​/​\xdb\x0f\x84\xb5\x00\​x00\x00\x8b\x3b\x3b\x​fe\x73\xef\x52\x53\x5​6\x57\x51\x8b\x55\x18​\x83\xe9\x02\x66\x8b\​x04\x31\x66\x39\x04\x​39\x0f\x85\x8c\x00\x0​0\x00\x8b\xd9\xc1\xf9​\x02\x85\xc9\x74\x11\​x8b\x06\x33\x07\x83\x​c6\x04\x83\xc7\x04\x8​5\xc0\x75\x03\x49\x75​\xef\x75\x16\x03\xcb\​x83\xe1\x03\x85\xc9\x​74\x0d\x8a\x06\x8a\x2​7\x46\x47\x38\xe0\x75​\x03\x49\x75\xf3\x75\​x58\x59\x5f\x5e\x56\x​57\x03\xf9\x03\xf1\x8​3\xe9\x04\x83\xc1\x04​\x8b\xc2\x83\xe8\x04\​x78\x28\x3b\xc8/​s·​and·​$virus·​=·​"W32/​Fizzer.​gen\@MM",​·​last·​LINE;​
552 »       ​»       ​»       ​»       ​}586 »       ​»       ​»       ​»       ​}
553 »       ​»       ​»       ​}587 »       ​»       ​»       ​}
554 »       ​»       ​»       ​if($total==11264·​||·​$total==13312)​·​{588 »       ​»       ​»       ​/​\x53\x6f\x66\x74\x77\​x61\x72\x65\x20\x70\x​72\x6f\x76\x69\x64\x6​5\x20\x62\x79\x20\x5b​\x4d\x41\x54\x52\x69\​x58\x5d\x20\x56\x58\x​20\x74\x65\x61\x6d/​s·​and·​$virus·​=·​"W32/​MTX.​gen\@M",​·​last·​LINE;​
555 »       ​»       ​»       ​»       ​/​\x91\x04\x00\xa8\x60\​x54\x58\x23\x23\x23\x​23\x5c\x60\x64\x68\x2​3\x23\x23\x23\x6c\x70​\x74\x78\x23\x23\x23\​x23\x7c\x80\x84\x88\x​23\x23\x23\x23\x8c\x9​0\x94\x98\x23\x23\x23​\x23\x9c\xa0\xa4/​s·​and·​$virus·​=·​"W32/​Bagle.​af\@MM",​·​last·​LINE;​589 »       ​»       ​»       ​/​\x76\x69\x72\x75\x73\​x65\x73.​+\x65\x78\x70\x6c\x6f​\x69\x74.​+\x70\x61\x74\x63\x68​\x20\x68\x61\x73\x20\​x62\x65\x65\x6e\x20\x​73\x75\x70\x70\x6c\x6​9\x65\x64\x20\x77\x69​\x74\x68\x20\x74\x68\​x69\x73\x20\x65\x6d\x​61\x69\x6c\x20\x61\x6​e\x64\x20\x77\x69\x6c​\x6c\x20\x66\x69\x78\​x20\x74\x68\x65\x20\x​73\x65\x63\x75\x72\x6​9\x74\x79\x20\x68\x6f​\x6c\x65.​+\x70\x61\x74\x63\x68​\x2e\x65\x78\x65/​s·​and·​$virus·​=·​"W32/​Heidi\@MM",​·​last·​LINE;​
556 »       ​»       ​»       ​}590 »       ​»       ​»       ​/​\x5b\x57\x69\x6e\x33\​x32\x2e\x4f\x72\x61\x​6e\x67\x65\x20\x62\x7​9\x20\x45\x62\x6f\x6c​\x61\x5d\x00\x44\x65\​x64\x69\x63\x61\x74\x​65\x64\x20\x74\x6f\x2​0\x74\x68\x65\x20\x4e​\x59\x46\x44\x20\x61\​x6e\x64\x20\x4e\x59\x​50\x44\x2e/​s·​and·​$virus·​=·​"W32/​Awfull",​·​last·​LINE;​
557 »       ​»       ​»       ​if($total<=6144)​·​{ 
558 »       ​»       ​»       ​»       ​/​\x77\x6f\x72\x6d\x49\​x77\x69\x6e\x67.​+\x57\x69\x6e\x33\x32​\x2e\x20\x49\x6d\x65\​x6c\x64\x61\x20\x74\x​68\x65\x20\x56\x42\x2​0\x56\x69\x72\x75\x73​/​s·​and·​$virus·​=·​"W32/​Alcop.​gen\@MM",​·​last·​LINE;​ 
559 »       ​»       ​»       ​} 
560 »       ​»       ​»       ​if($total==2048·​||·​$total==4096)​·​{ 
561 »       ​»       ​»       ​»       ​/​\x06\x00\x42\x00\x49\​x00\x4e\x00\x41\x00\x​52\x00\x59\x00\x01\x0​0\x30\x00\x00\x00\x00​\x00\x00\x00\x6b\x7d\​x66\x85\x94\x15\xad\x​1d\xd6\x94\xdd\xc4\x8​9\xe6\x39\x31\x49\xad​\xb5\x58\xf0\x93\x97\​x32\x59\x2b\xd1\xc0\x​fd\x16\x8e\x4e/​s·​and·​$virus·​=·​"W32/​Netsky.​p\@MM",​·​last·​LINE;​ 
562 »       ​»       ​»       ​} 
563 »       ​»       ​»       ​if($total>=1024·​&&·​$total<=5120)​·​{ 
564 »       ​»       ​»       ​»       ​/​\xed.​{0,​13}\xe8.​{0,​17}\xe9.​{0,​12}\xff\xff\xff.​{0,​19}\x83/​s·​and·​$virus·​=·​"W32/​Netsky.​c\@MM",​·​last·​LINE;​ 
565 »       ​»       ​»       ​} 
566 »       ​»       ​»       ​if($total>102400·​&&·​$total<=160000)​·​{ 
567 »       ​»       ​»       ​»       ​/​\x49\x2d\x57\x6f\x72\​x6d\x2e\x53\x75\x70\x​65\x72\x4e\x6f\x76\x6​1/​s·​and·​$virus·​=·​"W32/​Sintesys\@MM",​·​last·​LINE;​ 
568 »       ​»       ​»       ​} 
569 »       ​»       ​»       ​/​\x08\xb5\x6d\xea\x46\​x82\x32\x67\x62\x42\x​2b\x16\x59\x97\xcb\xd​b\x40\x1c\x02\xd2\x43​\x40\xa0\x99\x65\x20\​x99\x2a\x9d\xa1\x21\x​a1\xa1\x1d\x55\x05\x1​9\x01\x57\x55\x32\x8c​\x41\xc5\x08\x01\x76\​x0a\x43\x0f\x81\x87\x​b0\xda\x18\x3d\x42\x2​8\x28\xa8\x80\xac\xd2​\xe9/​s·​and·​$virus·​=·​"W32/​Navidad.​e\@M",​·​last·​LINE;​591 »       ​»       ​»       ​/​\x08\xb5\x6d\xea\x46\​x82\x32\x67\x62\x42\x​2b\x16\x59\x97\xcb\xd​b\x40\x1c\x02\xd2\x43​\x40\xa0\x99\x65\x20\​x99\x2a\x9d\xa1\x21\x​a1\xa1\x1d\x55\x05\x1​9\x01\x57\x55\x32\x8c​\x41\xc5\x08\x01\x76\​x0a\x43\x0f\x81\x87\x​b0\xda\x18\x3d\x42\x2​8\x28\xa8\x80\xac\xd2​\xe9/​s·​and·​$virus·​=·​"W32/​Navidad.​e\@M",​·​last·​LINE;​
570 »       ​»       ​»       ​/​\x5b\x69\x4b\x78\x5d\​x20\x28\x63\x29\x20\x​31\x39\x39\x39\x20\x6​1\x6c\x6c\x20\x72\x69​\x67\x68\x74\x20\x72\​x65\x73\x65\x72\x76\x​65\x64\x20\x2d\x20\x7​0\x72\x65\x73\x65\x6e​\x74\x20\x41\x6c\x64\​x65\x42\x61\x72\x61\x​6e/​s·​and·​$virus·​=·​"W32/​Adebar.​dr",​·​last·​LINE;​ 
571 »       ​»       ​»       ​/​\x2e\x41\x56\x58\x65\​x6e\x63\x72/​s·​and·​$virus·​=·​"W32/​XTC\@MM",​·​last·​LINE;​ 
572 »       ​»       ​»       ​/​\x5b\x57\x69\x6e\x33\​x32\x2e[^\x5d]+\x5d\x​20.​+\x20\x47\x69\x67\x61​\x62\x79\x74\x65\x2f\​x4d\x65\x74\x61\x70\x​68\x61\x73\x65/​s·​and·​$virus·​=·​"W32/​GMetaphase.​by\@MM",​·​last·​LINE;​592 »       ​»       ​»       ​/​\x5b\x57\x69\x6e\x33\​x32\x2e[^\x5d]+\x5d\x​20.​+\x20\x47\x69\x67\x61​\x62\x79\x74\x65\x2f\​x4d\x65\x74\x61\x70\x​68\x61\x73\x65/​s·​and·​$virus·​=·​"W32/​GMetaphase.​by\@MM",​·​last·​LINE;​
573 »       ​»       ​»       ​/​\x5b\x57\x69\x6e[^\x5​d]+\x5d\x20\x62\x79\x​20\x52\x61\x74\x74\x6​5\x72\x2f\d+/​s·​and·​$virus·​=·​"W32/​Ratter.​by",​·​last·​LINE;​593 »       ​»       ​»       ​/​\x5b\x57\x69\x6e\x32\​x6b\x2e\x4a\x6f\x73\x​73\x5d\x20\x62\x79\x2​0\x52\x61\x74\x74\x65​\x72\x2f\d\d\x41/​s·​and·​$virus·​=·​"W32/​Joss.​919",​·​last·​LINE;​
574 »       ​»       ​»       ​/​\x0d\x0a\x2e\x0d\x0a\​x00\x00\x00\x44\x41\x​54\x41\x20\x0d\x0a\x0​0\x48\x45\x4c\x4f\x20​\x25\x73\x0d\x0a\x00\​x00\x00\x3e\x0d\x0a\x​00\x4d\x41\x49\x4c\x2​0\x46\x52\x4f\x4d\x3a​\x20\x3c\x00\x00\x00\​x00\x52\x43\x50\x54\x​20\x54\x4f\x3a\x3c\x0​0\x00\x00\x25\x64\x00​\x00/​s·​and·​$virus·​=·​"W32/​Klez.​gen\@MM",​·​last·​LINE;​ 
575 »       ​»       ​»       ​/​\x14\xff\x56\xb9\x36\​xdc\x5a\xbd\x1b\x93\x​eb\xea\x5f\x21\xb8\x3​5\x73\x1b\xfc\xa6\xdc​\x6f\x01\x24\x8b\x14\​x85\xb8\x6c\x28\x0d\x​3b\xd1\x74\x09\x40\xb​3\xbb\x95\x4a\x1a\x74​\x15\x72\xe5\x1a\x89\​x0c\x8b\x00\xcf\xb7\x​90\x49\x24\xfe\x81\xc​3\x22\x8d\xa5\x68\x7a​\xb4/​s·​and·​$virus·​=·​"BackDoor.​arsd",​·​last·​LINE;​ 
576 »       ​»       ​»       ​/​\x57\x49\x4e\x33\x32\​x2e\x50\x49\x4c\x53\x​45\x4e\x20\x56\x49\x5​2\x55\x53\x20\x62\x79​\x20\x49\x6e\x74\x31\​x33\x68\x2f\x49\x4b\x​58\x00\x4d\x61\x44\x6​5\x20\x69\x4e\x20\x50​\x61\x52\x61\x47\x75\​x41\x79/​s·​and·​$virus·​=·​"W32/​Pilsen.​cmp.​4096",​·​last·​LINE;​ 
577 »       ​»       ​»       ​/​\x5b\x57\x69\x6e\x33\​x32\x2e\x4f\x72\x61\x​6e\x67\x65\x20\x62\x7​9\x20\x45\x62\x6f\x6c​\x61\x5d\x00\x44\x65\​x64\x69\x63\x61\x74\x​65\x64\x20\x74\x6f\x2​0\x74\x68\x65\x20\x4e​\x59\x46\x44\x20\x61\​x6e\x64\x20\x4e\x59\x​50\x44\x2e/​s·​and·​$virus·​=·​"W32/​Awfull",​·​last·​LINE;​ 
578 »       ​»       ​»       ​/​\x53\x6f\x66\x74\x77\​x61\x72\x65\x20\x70\x​72\x6f\x76\x69\x64\x6​5\x20\x62\x79\x20\x5b​\x4d\x41\x54\x52\x69\​x58\x5d\x20\x56\x58\x​20\x74\x65\x61\x6d/​s·​and·​$virus·​=·​"W32/​MTX.​gen\@M",​·​last·​LINE;​ 
579 »       ​»       ​»       ​/​\x57\x69\x6e\x33\x32\​x2f\x41\x73\x74\x72\x​6f\x47\x69\x72\x6c\x2​0\x41\x73\x74\x72\x6f​\x43\x6f\x64\x65\x64\​x20\x62\x79\x20\x61\x​20\x57\x61\x7a\x65\x7​8\x00\x59\x6f\x75\x72​\x20\x73\x79\x73\x74\​x65\x6d\x20\x69\x73\x​20\x69\x6e\x66\x65\x6​3\x74\x65\x64\x20\x62​\x79\x20\x57\x69\x6e\​x33\x32\x2f\x41\x73\x​74\x72\x6f\x47\x69\x7​2\x6c\x20\x76\d+\x2e\​d+.​+\x44\x65\x64\x69\x63​\x61\x74\x65\x64\x20\​x74\x6f\x20\x41\x6e\x​69\x74\x61\x20\x61\x6​e\x64\x20\x6f\x75\x72​\x20\x70\x65\x6e\x67\​x2d\x67\x75\x69\x6e\x​20\x3b\x29\x0d/​s·​and·​$virus·​=·​"Win32.​Asorl",​·​last·​LINE;​594 »       ​»       ​»       ​/​\x57\x69\x6e\x33\x32\​x2f\x41\x73\x74\x72\x​6f\x47\x69\x72\x6c\x2​0\x41\x73\x74\x72\x6f​\x43\x6f\x64\x65\x64\​x20\x62\x79\x20\x61\x​20\x57\x61\x7a\x65\x7​8\x00\x59\x6f\x75\x72​\x20\x73\x79\x73\x74\​x65\x6d\x20\x69\x73\x​20\x69\x6e\x66\x65\x6​3\x74\x65\x64\x20\x62​\x79\x20\x57\x69\x6e\​x33\x32\x2f\x41\x73\x​74\x72\x6f\x47\x69\x7​2\x6c\x20\x76\d+\x2e\​d+.​+\x44\x65\x64\x69\x63​\x61\x74\x65\x64\x20\​x74\x6f\x20\x41\x6e\x​69\x74\x61\x20\x61\x6​e\x64\x20\x6f\x75\x72​\x20\x70\x65\x6e\x67\​x2d\x67\x75\x69\x6e\x​20\x3b\x29\x0d/​s·​and·​$virus·​=·​"Win32.​Asorl",​·​last·​LINE;​
580 »       ​»       ​»       ​/​\x76\x69\x72\x75\x73\​x65\x73.​+\x65\x78\x70\x6c\x6f​\x69\x74.​+\x70\x61\x74\x63\x68​\x20\x68\x61\x73\x20\​x62\x65\x65\x6e\x20\x​73\x75\x70\x70\x6c\x6​9\x65\x64\x20\x77\x69​\x74\x68\x20\x74\x68\​x69\x73\x20\x65\x6d\x​61\x69\x6c\x20\x61\x6​e\x64\x20\x77\x69\x6c​\x6c\x20\x66\x69\x78\​x20\x74\x68\x65\x20\x​73\x65\x63\x75\x72\x6​9\x74\x79\x20\x68\x6f​\x6c\x65.​+\x70\x61\x74\x63\x68​\x2e\x65\x78\x65/​s·​and·​$virus·​=·​"W32/​Heidi\@MM",​·​last·​LINE;​ 
581 »       ​»       ​»       ​/​\x43\x6f\x64\x65\x64\​x20\x62\x79\x20\x47\x​72\x69\x59\x6f.​+\x32\x39\x41/​s·​and·​$virus·​=·​"W32/​GriYo.​29A.​by",​·​last·​LINE;​ 
582 »       ​»       ​»       ​/​\x68\x74\x74\x70\x3a\​x2f\x2f\x77\x77\x70\x​2e\x69\x63\x71\x2e\x6​3\x6f\x6d\x2f\x73\x63​\x72\x69\x70\x74\x73\​x2f\x57\x57\x50\x4d\x​73\x67\x2e\x64\x6c\x6​c\x3f\x66\x72\x6f\x6d​\x3d\w+\x26\x66\x72\x​6f\x6d\x65\x6d\x61\x6​9\x6c\x3d\w+\x40\w+\x​2e\w+\x26\x73\x75\x62​\x6a\x65\x63\x74\x3d\​x50\x72\x6f\x67\x72\x​61\x6d\x2b\x65\x78\x6​5\x63\x75\x74\x69\x6f​\x6e\x26\x62\x6f\x64\​x79\x3d\x54\x68\x65\x​2b\x70\x65\x72\x73\x6​f\x6e\x2b\x74\x68\x61​\x74\x2b\x73\x65\x6e\​x74\x2b\x74\x68\x69\x​73\x2b\x70\x61\x67\x6​5\x72\x2c\x2b\x69\x73​\x2b\x77\x69\x74\x68\​x2b\x61\x2b\x66\x69\x​6c\x65\x2b\x67\x65\x6​e\x65\x72\x61\x74\x65​\x64\x2b\x62\x79\x2b\​x4a\x75\x6e\x74\x61\x​64\x6f\x72\x26\x74\x6​f\x3d\d{6,​}\x26\x73\x65\x6e\x64​\x3d.​+/​s·​and·​$virus·​=·​"MultiDropper-​BN",​·​last·​LINE;​595 »       ​»       ​»       ​/​\x68\x74\x74\x70\x3a\​x2f\x2f\x77\x77\x70\x​2e\x69\x63\x71\x2e\x6​3\x6f\x6d\x2f\x73\x63​\x72\x69\x70\x74\x73\​x2f\x57\x57\x50\x4d\x​73\x67\x2e\x64\x6c\x6​c\x3f\x66\x72\x6f\x6d​\x3d\w+\x26\x66\x72\x​6f\x6d\x65\x6d\x61\x6​9\x6c\x3d\w+\x40\w+\x​2e\w+\x26\x73\x75\x62​\x6a\x65\x63\x74\x3d\​x50\x72\x6f\x67\x72\x​61\x6d\x2b\x65\x78\x6​5\x63\x75\x74\x69\x6f​\x6e\x26\x62\x6f\x64\​x79\x3d\x54\x68\x65\x​2b\x70\x65\x72\x73\x6​f\x6e\x2b\x74\x68\x61​\x74\x2b\x73\x65\x6e\​x74\x2b\x74\x68\x69\x​73\x2b\x70\x61\x67\x6​5\x72\x2c\x2b\x69\x73​\x2b\x77\x69\x74\x68\​x2b\x61\x2b\x66\x69\x​6c\x65\x2b\x67\x65\x6​e\x65\x72\x61\x74\x65​\x64\x2b\x62\x79\x2b\​x4a\x75\x6e\x74\x61\x​64\x6f\x72\x26\x74\x6​f\x3d\d{6,​}\x26\x73\x65\x6e\x64​\x3d.​+/​s·​and·​$virus·​=·​"MultiDropper-​BN",​·​last·​LINE;​
583 »       ​»       ​»       ​/​\x57\x69\x6e[\x32\x33​\x35\x38\x39]{2}\x2e\​w+\x2e*\w*\x20\x62\x7​9\x20\w+.​+\x67\x65\x6e\x65\x72​\x61*\x74\x69\x6f\x6e​\x20\x76\x69\x72\x75\​x73\x20/​s·​and·​$virus·​=·​"W32/​Blakan",​·​last·​LINE;​ 
584 »       ​»       ​»       ​/​\x59\x61\x70\x21\x20\​x57\x68\x61\x74\x20\x​63\x6f\x75\x6c\x64\x2​0\x69\x74\x20\x42\x20​\x3f\xa8\x20\x49\x74\​x27\x73\x20\x59\x2e\x​41\x2e\x50\x2e\x20\x2​8\x59\x65\x74\x20\x41​\x6e\x6f\x74\x68\x65\​x72\x20\x50\x61\x72\x​61\x73\x69\x74\x65\x2​9/​s·​and·​$virus·​=·​"HLLP.​Yap.​8421",​·​last·​LINE;​596 »       ​»       ​»       ​/​\x59\x61\x70\x21\x20\​x57\x68\x61\x74\x20\x​63\x6f\x75\x6c\x64\x2​0\x69\x74\x20\x42\x20​\x3f\xa8\x20\x49\x74\​x27\x73\x20\x59\x2e\x​41\x2e\x50\x2e\x20\x2​8\x59\x65\x74\x20\x41​\x6e\x6f\x74\x68\x65\​x72\x20\x50\x61\x72\x​61\x73\x69\x74\x65\x2​9/​s·​and·​$virus·​=·​"HLLP.​Yap.​8421",​·​last·​LINE;​
585 »       ​»       ​»       ​/​\x5b\x57\x69\x6e\x32\​x6b\x2e\x4a\x6f\x73\x​73\x5d\x20\x62\x79\x2​0\x52\x61\x74\x74\x65​\x72\x2f\d\d\x41/​s·​and·​$virus·​=·​"W32/​Joss.​919",​·​last·​LINE;​597 »       ​»       ​»       ​/​\x57\x49\x4e\x33\x32\​x2e\x50\x49\x4c\x53\x​45\x4e\x20\x56\x49\x5​2\x55\x53\x20\x62\x79​\x20\x49\x6e\x74\x31\​x33\x68\x2f\x49\x4b\x​58\x00\x4d\x61\x44\x6​5\x20\x69\x4e\x20\x50​\x61\x52\x61\x47\x75\​x41\x79/​s·​and·​$virus·​=·​"W32/​Pilsen.​cmp.​4096",​·​last·​LINE;​
586 »       ​»       ​»       ​if($total<=4096)​·​{598 »       ​»       ​»       ​/​\x2e\x41\x56\x58\x65\​x6e\x63\x72/​s·​and·​$virus·​=·​"W32/​XTC\@MM",​·​last·​LINE;​
587 »       ​»       ​»       ​»       ​/​\x49\x2d\x57\x6f\x72\​x6d\x2e\x46\x72\x69\x​65\x6e\x64\x73\x00\x4​3\x6f\x64\x65\x64\x20​\x62\x79\x20\x50\x65\​x74\x69\x4b\x20\x28\x​63\x29\x32\x30\x30\x3​1.​+\x54\x6f\x20\x6d\x79​\x20\x66\x72\x69\x65\​x6e\x64\x73\x20\x4d\x​61\x79\x61\x20\x61\x6​e\x64\x20\x4c\x61\x75​\x72\x65\x6e\x74/​s·​and·​$virus·​=·​"W32/​PetTick\@MM",​·​last·​LINE;​599 »       ​»       ​»       ​/​\x43\x6f\x64\x65\x64\​x20\x62\x79\x20\x47\x​72\x69\x59\x6f.​+\x32\x39\x41/​s·​and·​$virus·​=·​"W32/​GriYo.​29A.​by",​·​last·​LINE;​
588 »       ​»       ​»       ​}600 »       ​»       ​»       ​/​\x14\xff\x56\xb9\x36\​xdc\x5a\xbd\x1b\x93\x​eb\xea\x5f\x21\xb8\x3​5\x73\x1b\xfc\xa6\xdc​\x6f\x01\x24\x8b\x14\​x85\xb8\x6c\x28\x0d\x​3b\xd1\x74\x09\x40\xb​3\xbb\x95\x4a\x1a\x74​\x15\x72\xe5\x1a\x89\​x0c\x8b\x00\xcf\xb7\x​90\x49\x24\xfe\x81\xc​3\x22\x8d\xa5\x68\x7a​\xb4/​s·​and·​$virus·​=·​"BackDoor.​arsd",​·​last·​LINE;​
 601 »       ​»       ​»       ​/​\x0d\x0a\x2e\x0d\x0a\​x00\x00\x00\x44\x41\x​54\x41\x20\x0d\x0a\x0​0\x48\x45\x4c\x4f\x20​\x25\x73\x0d\x0a\x00\​x00\x00\x3e\x0d\x0a\x​00\x4d\x41\x49\x4c\x2​0\x46\x52\x4f\x4d\x3a​\x20\x3c\x00\x00\x00\​x00\x52\x43\x50\x54\x​20\x54\x4f\x3a\x3c\x0​0\x00\x00\x25\x64\x00​\x00/​s·​and·​$virus·​=·​"W32/​Klez.​gen\@MM",​·​last·​LINE;​
 602 »       ​»       ​»       ​/​\x5b\x69\x4b\x78\x5d\​x20\x28\x63\x29\x20\x​31\x39\x39\x39\x20\x6​1\x6c\x6c\x20\x72\x69​\x67\x68\x74\x20\x72\​x65\x73\x65\x72\x76\x​65\x64\x20\x2d\x20\x7​0\x72\x65\x73\x65\x6e​\x74\x20\x41\x6c\x64\​x65\x42\x61\x72\x61\x​6e/​s·​and·​$virus·​=·​"W32/​Adebar.​dr",​·​last·​LINE;​
 603 »       ​»       ​»       ​/​\x5b\x57\x69\x6e[^\x5​d]+\x5d\x20\x62\x79\x​20\x52\x61\x74\x74\x6​5\x72\x2f\d+/​s·​and·​$virus·​=·​"W32/​Ratter.​by",​·​last·​LINE;​
 604 »       ​»       ​»       ​/​\x57\x69\x6e[\x32\x33​\x35\x38\x39]{2}\x2e\​w+\x2e*\w*\x20\x62\x7​9\x20\w+.​+\x67\x65\x6e\x65\x72​\x61*\x74\x69\x6f\x6e​\x20\x76\x69\x72\x75\​x73\x20/​s·​and·​$virus·​=·​"W32/​Blakan",​·​last·​LINE;​
589 »       ​»       ​»       ​if($total>1024)​·​{605 »       ​»       ​»       ​if($total>1024)​·​{
590 »       ​»       ​»       ​»       ​/​\x4e\x45\x54\x2e\x64\​x6f\x74\x4e\x45\x54\x​20\x62\x79\x20\x42\x6​5\x6e\x6e\x79\x2f\x32​\x39\x41/​s·​and·​$virus·​=·​"W32/​Donut.​dr",​·​last·​LINE;​606 »       ​»       ​»       ​»       ​/​\x4e\x45\x54\x2e\x64\​x6f\x74\x4e\x45\x54\x​20\x62\x79\x20\x42\x6​5\x6e\x6e\x79\x2f\x32​\x39\x41/​s·​and·​$virus·​=·​"W32/​Donut.​dr",​·​last·​LINE;​
591 »       ​»       ​»       ​»       ​/​\x57\x69\x6e\x33\x32\​x2e\x47\x69\x72\x69\x​67\x61\x74\x20\x69\x7​3\x20\x6e\x6f\x77\x20​\x61\x63\x74\x69\x76\​x65\x21/​s·​and·​$virus·​=·​"W32/​Giri.​dr",​·​last·​LINE;​607 »       ​»       ​»       ​»       ​/​\x57\x69\x6e\x33\x32\​x2e\x47\x69\x72\x69\x​67\x61\x74\x20\x69\x7​3\x20\x6e\x6f\x77\x20​\x61\x63\x74\x69\x76\​x65\x21/​s·​and·​$virus·​=·​"W32/​Giri.​dr",​·​last·​LINE;​
592 »       ​»       ​»       ​}608 »       ​»       ​»       ​}
 609 »       ​»       ​»       ​if($total==1024)​·​{
 610 »       ​»       ​»       ​»       ​/​\x00{2}.​.​\x00{13}[^\x00]\x00\x​00.​\x2e.​{5}\x00\x00\xed[^\x00​](\x00|\x01)​\x00\x00.​.​\x00\x00.​(\x00|\x01)​\x00\x00.​.​\x00{13}.​\x00\x00[^\x00][^\x2e​]/​s·​and·​$virus·​=·​"W32/​Magistr.​b\@MM",​·​last·​LINE;​
 611 »       ​»       ​»       ​»       ​/​\x50\x45\x00\x00\x4c\​x01.​\x00.​.​.​.​\x00\x00\x00\x00.​\x00\x00\x00\xe0\x00.​.​\x0b\x01.​.​\x00.​.​\x00\x00.​\x00\x00\x00\x00\x00\​x00.​.​.​\x00\x00\x10\x00\x00\​x00.​.​\x00\x00\x00.​.​\x00\x10\x00\x00\x00.​\x00\x00.​\x00\x00\x00.​\x00\x00\x00.​\x00.​\x00\x70\x6c\x78\x72/​s·​and·​$virus·​=·​"W32/​Plex\@MM",​·​last·​LINE;​
 612 »       ​»       ​»       ​»       ​/​\x00{2}.​.​\x00{13}[^\x00]\x00\x​00.​\x2e.​{5}\x00\x00\xec[^\x00​\x04](\x00|\x01)​\x00\x00.​.​\x00\x00.​(\x00|\x01)​\x00\x00.​.​\x00{13}.​\x00\x00[^\x00][^\x2e​]/​s·​and·​$virus·​=·​"W32/​Magistr.​a\@MM",​·​last·​LINE;​
 613 »       ​»       ​»       ​}
 614 »       ​»       ​»       ​if($total>=8192·​&&·​$total<=15360)​·​{
 615 »       ​»       ​»       ​»       ​/​\x62.​?\x61.​?\x6c\x9f.​{0,​4}\xaf\x21.​{0,​4}\x3c.​{0,​5}\x31\x72\x6d.​{0,​5}\x20\x0d\x43.​?\x70.​?\x75.​?\x74\x0f\x6e.​{2,​6}\x7b.​{2,​6}\x4a\x25\x2f\x34\x3​e.​{0,​5}\xa1.​?\x79.​?\x70\x24.​{0,​4}\x50.​{0,​4}\x6f\x63.​?\x45\x6d.​?\x61.​?\x69.​{0,​4}\x6c.​\x72.​\x35.​{3,​4}\x65.​{1,​5}\x6b.​{4,​9}\x0d.​{0,​4}\x75.​{2}\x45.​{0,​4}\x4c\x2d\x6c.​?\x43\x6f.​?\x6e.​{1,​5}\x1f.​{0,​4}\xd9.​{0,​5}\x0d\x2f.​{0,​5}\x6d\xb8.​{2,​6}\x44\x69\x73.​{2,​3}\x6c.​{1,​5}\x3d.​{8,​9}\x47\xca.​?\x3c.​?\x0d\x6e.​{1,​6}\x65.​{0,​4}\x0a.​{0,​5}\x41.​?\x4f\x53.​?\x54\xc9.​\x64\x61.​{0,​5}\x51/​s·​and·​$virus·​=·​"PWS-​Banker.​k.​gen",​·​last·​LINE;​
 616 »       ​»       ​»       ​}
 617 »       ​»       ​»       ​if($total==11264·​||·​$total==13312)​·​{
 618 »       ​»       ​»       ​»       ​/​\x91\x04\x00\xa8\x60\​x54\x58\x23\x23\x23\x​23\x5c\x60\x64\x68\x2​3\x23\x23\x23\x6c\x70​\x74\x78\x23\x23\x23\​x23\x7c\x80\x84\x88\x​23\x23\x23\x23\x8c\x9​0\x94\x98\x23\x23\x23​\x23\x9c\xa0\xa4/​s·​and·​$virus·​=·​"W32/​Bagle.​af\@MM",​·​last·​LINE;​
 619 »       ​»       ​»       ​}
 620 »       ​»       ​»       ​if($total>102400·​&&·​$total<=160000)​·​{
 621 »       ​»       ​»       ​»       ​/​\x49\x2d\x57\x6f\x72\​x6d\x2e\x53\x75\x70\x​65\x72\x4e\x6f\x76\x6​1/​s·​and·​$virus·​=·​"W32/​Sintesys\@MM",​·​last·​LINE;​
 622 »       ​»       ​»       ​}
593 »       ​»       ​»       ​if($total>2048)​·​{623 »       ​»       ​»       ​if($total>2048)​·​{
594 »       ​»       ​»       ​»       ​/​\x7e\x46\x75\x6e\x20\​x4c\x6f\x76\x69\x6e\x​67\x20\x43\x72\x69\x6​d\x69\x6e\x61\x6c\x7e​/​s·​and·​$virus·​=·​"W32/​FunLove.​4099",​·​last·​LINE;​624 »       ​»       ​»       ​»       ​/​\x7e\x46\x75\x6e\x20\​x4c\x6f\x76\x69\x6e\x​67\x20\x43\x72\x69\x6​d\x69\x6e\x61\x6c\x7e​/​s·​and·​$virus·​=·​"W32/​FunLove.​4099",​·​last·​LINE;​
595 »       ​»       ​»       ​}625 »       ​»       ​»       ​}
596 »       ​»       ​»       ​if($total==8192)​·​{ 
597 »       ​»       ​»       ​»       ​/​\x96\xb4\x66\x55\xd6\​xc5\xa3\xe2\x46\x4b\x​4c\x54\x52\x61\x6d\x9​3\x14\x56\x81\xae\xc7​\x17\xa2\x2f\x0c\x82\​xff\xe8\x24\x2e\xb6\x​6a/​s·​and·​$virus·​=·​"W32/​Lovgate.​x\@MM",​·​last·​LINE;​ 
598 »       ​»       ​»       ​} 
599 »       ​»       ​»       ​if($total==13312·​||·​($total>=24576·​&&·​$total<=36864)​)​·​{626 »       ​»       ​»       ​if($total==13312·​||·​($total>=24576·​&&·​$total<=36864)​)​·​{
600 »       ​»       ​»       ​»       ​/​\x79.​{3,​81}[\x2a\x65\xb0\x45]​\x72\x43[\x04\xa2\x9e​\x1e][\xec\x8f\xf8\x6​2]/​s·​and·​$virus·​=·​"W32/​Mytob.​gen\@MM",​·​last·​LINE;​627 »       ​»       ​»       ​»       ​/​\x79.​{3,​81}[\x2a\x65\xb0\x45]​\x72\x43[\x04\xa2\x9e​\x1e][\xec\x8f\xf8\x6​2]/​s·​and·​$virus·​=·​"W32/​Mytob.​gen\@MM",​·​last·​LINE;​
601 »       ​»       ​»       ​}628 »       ​»       ​»       ​}
602 »       ​»       ​»       ​if(($total>=1024·​&&·​$total<=3072)​·​||·​$total==25600)​·​{629 »       ​»       ​»       ​if($total<=4096)​·​{
603 »       ​»       ​»       ​»       ​/​\xd0\x32\xc5\x32\xc2\​x32\xc6\xd2\xc0\x02\x​c1.​{0,​24}\xd3\xc2\x88\x07\x​47\x49\x75\xd2\xe8\x0​1\x00\x00\x00/​s·​and·​$virus·​=·​"W32/​Bagle.​ai\@MM",​·​last·​LINE;​630 »       ​»       ​»       ​»       ​/​\x49\x2d\x57\x6f\x72\​x6d\x2e\x46\x72\x69\x​65\x6e\x64\x73\x00\x4​3\x6f\x64\x65\x64\x20​\x62\x79\x20\x50\x65\​x74\x69\x4b\x20\x28\x​63\x29\x32\x30\x30\x3​1.​+\x54\x6f\x20\x6d\x79​\x20\x66\x72\x69\x65\​x6e\x64\x73\x20\x4d\x​61\x79\x61\x20\x61\x6​e\x64\x20\x4c\x61\x75​\x72\x65\x6e\x74/​s·​and·​$virus·​=·​"W32/​PetTick\@MM",​·​last·​LINE;​
604 »       ​»       ​»       ​}631 »       ​»       ​»       ​}
605 »       ​»       ​»       ​if($total>=8192·​&&·​$total<=15360)​·​{632 »       ​»       ​»       ​if($total>=1024·​&&·​$total<=5120)​·​{
606 »       ​»       ​»       ​»       ​/​\x62.​?\x61.​?\x6c\x9f.​{0,​4}\xaf\x21.​{0,​4}\x3c.​{0,​5}\x31\x72\x6d.​{0,​5}\x20\x0d\x43.​?\x70.​?\x75.​?\x74\x0f\x6e.​{2,​6}\x7b.​{2,​6}\x4a\x25\x2f\x34\x3​e.​{0,​5}\xa1.​?\x79.​?\x70\x24.​{0,​4}\x50.​{0,​4}\x6f\x63.​?\x45\x6d.​?\x61.​?\x69.​{0,​4}\x6c.​\x72.​\x35.​{3,​4}\x65.​{1,​5}\x6b.​{4,​9}\x0d.​{0,​4}\x75.​{2}\x45.​{0,​4}\x4c\x2d\x6c.​?\x43\x6f.​?\x6e.​{1,​5}\x1f.​{0,​4}\xd9.​{0,​5}\x0d\x2f.​{0,​5}\x6d\xb8.​{2,​6}\x44\x69\x73.​{2,​3}\x6c.​{1,​5}\x3d.​{8,​9}\x47\xca.​?\x3c.​?\x0d\x6e.​{1,​6}\x65.​{0,​4}\x0a.​{0,​5}\x41.​?\x4f\x53.​?\x54\xc9.​\x64\x61.​{0,​5}\x51/​s·​and·​$virus·​=·​"PWS-​Banker.​k.​gen",​·​last·​LINE;​633 »       ​»       ​»       ​»       ​/​\xed.​{0,​13}\xe8.​{0,​17}\xe9.​{0,​12}\xff\xff\xff.​{0,​19}\x83/​s·​and·​$virus·​=·​"W32/​Netsky.​c\@MM",​·​last·​LINE;​
607 »       ​»       ​»       ​}634 »       ​»       ​»       ​}
608 »       ​»       ​»       ​if($total>=7168·​&&·​$total<8192)​·​{635 »       ​»       ​»       ​if($total>=7168·​&&·​$total<8192)​·​{
609 »       ​»       ​»       ​»       ​/​\x4a\x54\x4d\x20\x2d\​x20\x66\x72\x6f\x6d\x​20\x65\x5b\x61\x78\x5​d\x20\x74\x6f\x20\x48​\x6f\x6d\x65\x72\x20\​x54\x68\x61\x20\x50\x​69\x6c\x65/​s·​and·​$virus·​=·​"W32/​HLL.​ow.​24590",​·​last·​LINE;​636 »       ​»       ​»       ​»       ​/​\x4a\x54\x4d\x20\x2d\​x20\x66\x72\x6f\x6d\x​20\x65\x5b\x61\x78\x5​d\x20\x74\x6f\x20\x48​\x6f\x6d\x65\x72\x20\​x54\x68\x61\x20\x50\x​69\x6c\x65/​s·​and·​$virus·​=·​"W32/​HLL.​ow.​24590",​·​last·​LINE;​
610 »       ​»       ​»       ​}637 »       ​»       ​»       ​}
611 »       ​»       ​»       ​if($total==1024)​·​{638 »       ​»       ​»       ​if(($total>=1024·​&&·​$total<=3072)​·​||·​$total==25600)​·​{
612 »       ​»       ​»       ​»       ​/​\x00{2}.​.​\x00{13}[^\x00]\x00\x​00.​\x2e.​{5}\x00\x00\xed[^\x00​](\x00|\x01)​\x00\x00.​.​\x00\x00.​(\x00|\x01)​\x00\x00.​.​\x00{13}.​\x00\x00[^\x00][^\x2e​]/​s·​and·​$virus·​=·​"W32/​Magistr.​b\@MM",​·​last·​LINE;​639 »       ​»       ​»       ​»       ​/​\xd0\x32\xc5\x32\xc2\​x32\xc6\xd2\xc0\x02\x​c1.​{0,​24}\xd3\xc2\x88\x07\x​47\x49\x75\xd2\xe8\x0​1\x00\x00\x00/​s·​and·​$virus·​=·​"W32/​Bagle.​ai\@MM",​·​last·​LINE;​
613 »       ​»       ​»       ​»       ​/​\x00{2}.​.​\x00{13}[^\x00]\x00\x​00.​\x2e.​{5}\x00\x00\xec[^\x00​\x04](\x00|\x01)​\x00\x00.​.​\x00\x00.​(\x00|\x01)​\x00\x00.​.​\x00{13}.​\x00\x00[^\x00][^\x2e​]/​s·​and·​$virus·​=·​"W32/​Magistr.​a\@MM",​·​last·​LINE;​ 
614 »       ​»       ​»       ​»       ​/​\x50\x45\x00\x00\x4c\​x01.​\x00.​.​.​.​\x00\x00\x00\x00.​\x00\x00\x00\xe0\x00.​.​\x0b\x01.​.​\x00.​.​\x00\x00.​\x00\x00\x00\x00\x00\​x00.​.​.​\x00\x00\x10\x00\x00\​x00.​.​\x00\x00\x00.​.​\x00\x10\x00\x00\x00.​\x00\x00.​\x00\x00\x00.​\x00\x00\x00.​\x00.​\x00\x70\x6c\x78\x72/​s·​and·​$virus·​=·​"W32/​Plex\@MM",​·​last·​LINE;​ 
615 »       ​»       ​»       ​} 
616 »       ​»       ​}·​elsif($type·​==·​4)​·​{ 
617 »       ​»       ​»       ​if($total>1024)​·​{ 
618 »       ​»       ​»       ​»       ​/​\x37\x33\x35\x30\x31\​x38\x36\x37\x20\x2d\x​20\x78\x38\x36\x2f\x6​c\x69\x6e\x75\x78\x20​\x6d\x6f\x64\x5f\x70\​x68\x70\x20\x76\x34\x​2e\x30\x2e\x32\x72\x6​3\x31\x2d\x76\x34\x2e​\x30\x2e\x35\x20\x72\​x65\x6d\x6f\x74\x65\x​20\x65\x78\x70\x6c\x6​f\x69\x74\x0a\x62\x79​\x20\x6c\x6f\x72\x69\​x61\x6e\x2e\x0a/​s·​and·​$virus·​=·​"Linux.​Osf.​8759",​·​last·​LINE;​ 
619 »       ​»       ​»       ​»       ​/​\x72\x6d\x20\x2d\x72\​x66\x20\x2f\x74\x6d\x​70\x2f\x2e\x62\x75\x6​7\x74\x72\x61\x71\x2e​\x63\x3b\x63\x61\x74\​x20\x3e\x20\x2f\x74\x​6d\x70\x2f\x2e\x75\x7​5\x62\x75\x67\x74\x72​\x61\x71\x20\x3c\x3c\​x20\x5f\x5f\x65\x6f\x​66\x5f\x5f\x3b\x0a\x0​0\x5f\x5f\x65\x6f\x66​\x5f/​s·​and·​$virus·​=·​"Linux/​Slapper.​worm",​·​last·​LINE;​ 
620 »       ​»       ​»       ​} 
621 »       ​»       ​»       ​if($total==4096)​·​{ 
622 »       ​»       ​»       ​»       ​/​\x2f\x74\x6d\x70\x2f\​x76\x69\x72\x75\x73\x​2e\x63\x00\x2f\x74\x6​d\x70\x2f\x76\x69\x63​\x74\x75\x6d/​s·​and·​$virus·​=·​"Linux/​Manpage",​·​last·​LINE;​ 
623 »       ​»       ​»       ​}640 »       ​»       ​»       ​}
624 »       ​»       ​»       ​if($total==44032)​·​{641 »       ​»       ​»       ​if($total==2048·​||·​$total==4096)​·​{
625 »       ​»       ​»       ​»       ​/​\x2f\x75\x73\x72\x2f\​x62\x69\x6e\x2f\x75\x​75\x64\x65\x63\x6f\x6​4\x65\x20\x2d\x70\x20​\x2f\x74\x6d\x70\x2f\​x2e\x75\x75\x61\x20\x​3e\x20\x2f\x74\x6d\x7​0\x2f\x2e\x61\x3b\x6b​\x69\x6c\x6c\x61\x6c\​x6c\x20\x2d\x39\x20\x​2e\x61\x3b\x63\x68\x6​d\x6f\x64\x20\x2b\x78​\x20\x2f\x74\x6d\x70\​x2f\x2e\x61\x3b\x6b\x​69\x6c\x6c\x61\x6c\x6​c\x20\x2d\x39\x20\x2e​\x61\x3b\x2f\x74\x6d\​x70\x2f\x2e\x61\x20\x​25\x73\x3b\x65\x78\x6​9\x74\x3b/​s·​and·​$virus·​=·​"BSD/​Scalper.​worm",​·​last·​LINE;​642 »       ​»       ​»       ​»       ​/​\x06\x00\x42\x00\x49\​x00\x4e\x00\x41\x00\x​52\x00\x59\x00\x01\x0​0\x30\x00\x00\x00\x00​\x00\x00\x00\x6b\x7d\​x66\x85\x94\x15\xad\x​1d\xd6\x94\xdd\xc4\x8​9\xe6\x39\x31\x49\xad​\xb5\x58\xf0\x93\x97\​x32\x59\x2b\xd1\xc0\x​fd\x16\x8e\x4e/​s·​and·​$virus·​=·​"W32/​Netsky.​p\@MM",​·​last·​LINE;​
626 »       ​»       ​»       ​}643 »       ​»       ​»       ​}
627 »       ​»       ​}·​elsif($type·​==·​5)​·​{644 »       ​»       ​»       ​if($total<=6144)​·​{
628 »       ​»       ​}·​elsif($type·​==·​6)​·​{645 »       ​»       ​»       ​»       ​/​\x77\x6f\x72\x6d\x49\​x77\x69\x6e\x67.​+\x57\x69\x6e\x33\x32​\x2e\x20\x49\x6d\x65\​x6c\x64\x61\x20\x74\x​68\x65\x20\x56\x42\x2​0\x56\x69\x72\x75\x73​/​s·​and·​$virus·​=·​"W32/​Alcop.​gen\@MM",​·​last·​LINE;​
629 »       ​»       ​»       ​if($total==7168)​·​{ 
630 »       ​»       ​»       ​»       ​/​\x49\x52\x43\x2d\x57\​x6f\x72\x6d\x2e\x48\x​6f\x6b\x6f\x20\x62\x7​9\x20\x4b\x75\x61\x73​\x61\x6e\x61\x67\x75\​x69/​s·​and·​$virus·​=·​"W32/​Hokilo.​worm",​·​last·​LINE;​ 
631 »       ​»       ​»       ​}646 »       ​»       ​»       ​}
632 »       ​»       ​»       ​/​\x28\x44\x80\x61\x79\​x28\x4e\x6f\x77\x29\x​51\x31\x90\x31\x29\x2​0\x41\x30\x64\x28\x4d​\x10\x8b\x12\x68\x55\​x01\x33\x29\xda\x47\x​4d\x73\x67\x08\x42\x6​f\x78\x50\x94\x61\x70​\x70\x79\x00\x20\x42\​x69\x72\x74\x68\x64\x​61\x36\x79\x63\x60/​s·​and·​$virus·​=·​"W97M/​Thus.​gen",​·​last·​LINE;​647 »       ​»       ​»       ​if($total==8192)​·​{
633 »       ​»       ​»       ​/​\x57.​*\x4d\x2e\x53\x70\x69​\x72\x6f\x68\x65\x74\​x61/​s·​and·​$virus·​=·​"W97M/​Generic",​·​last·​LINE;​648 »       ​»       ​»       ​»       ​/​\x96\xb4\x66\x55\xd6\​xc5\xa3\xe2\x46\x4b\x​4c\x54\x52\x61\x6d\x9​3\x14\x56\x81\xae\xc7​\x17\xa2\x2f\x0c\x82\​xff\xe8\x24\x2e\xb6\x​6a/​s·​and·​$virus·​=·​"W32/​Lovgate.​x\@MM",​·​last·​LINE;​
634 »       ​»       ​»       ​/​\x56\x4d\x50\x43\x4b\​x20\x76\d+\x2e\d+\w*\​x20\x5b[^\x5d]+\x5d/​s·​and·​$virus·​=·​"W97/​VMPCK1.​gen",​·​last·​LINE;​ 
635 »       ​»       ​»       ​/​\x57\x39\x37\x2e\x4e\​x69\x74\x72\x6f\x67\x​65\x6e/​s·​and·​$virus·​=·​"W97M/​Nitrogen.​intd",​·​last·​LINE;​ 
636 »       ​»       ​»       ​/​\x3c\x2d\x20\x74\x68\​x69\x73\x20\x69\x73\x​20[\w·​]+\x20\x6d\x61\x72\x6​b\x65\x72\x21/​s·​and·​$virus·​=·​"W97/​Marker.​gen",​·​last·​LINE;​ 
637 »       ​»       ​»       ​/​\x58\x39\x37\x4d\x2e\​x4e\x69\x74\x72\x6f\x​67\x65\x6e/​s·​and·​$virus·​=·​"X97M/​Generic",​·​last·​LINE;​ 
638 »       ​»       ​»       ​/​\x54\x68\x65\x20((\x6​d\x61\x6c\x65)​|(\x66\x65\x6d\x61\x6​c\x65)​)​\x20\x73\x74\x61\x67\​x65\x73\x20\x6f\x66\x​20\x6c\x69\x66\x65/​s·​and·​$virus·​=·​"IRC/​Stages.​worm",​·​last·​LINE;​ 
639 »       ​»       ​»       ​/​\x54\x68\x75\x73\x5f\​d\d\d/​s·​and·​$virus·​=·​"W97/​Thus.​gen",​·​last·​LINE;​ 
640 »       ​»       ​»       ​/​\x43\x41\x50.​+\x41\x75\x74\x6f\x45​\x78\x65\x63.​+\x41\x75\x74\x6f\x4f​\x70\x65\x6e.​+\x46\x69\x6c\x65\x4f​\x70\x65\x6e.​+\x46\x69\x6c\x65\x53​\x61\x76\x65.​+\x41\x75\x74\x6f\x43​\x6c\x6f\x73\x65.​+\x46\x69\x6c\x65\x53​\x61\x76\x65\x41\x73.​+\x54\x6f\x6f\x6c\x73​\x4d\x61\x63\x72\x6f/​s·​and·​$virus·​=·​"WM/​Cap",​·​last·​LINE;​ 
641 »       ​»       ​»       ​/​\x47\x75\x6f\x72\x6d\​x28\x56\x62\x73\x29\x​2e\x20\x4d\x69\x72\x6​3\x2f\x4f\x75\x74\x6c​\x6f\x6f\x6b\x2f\x56\​x62\x73\x2e\x20\x42\x​79\x20\x42\x4d\x20\x2​6\x20\x4f\x57\x20\x26​\x20\x4b\x61\x6c\x61\​x6d\x61\x72\x00\x6c\x​02\x42\x40\x6e/​s·​and·​$virus·​=·​"W97M/​Gorum",​·​last·​LINE;​ 
642 »       ​»       ​»       ​/​\x43\x41\x50\x75\x74\​x21\x20\x20\x62\x79\x​20\x2d\x2d\x3d\x7c\x7​c\x20\x4e\x7c\x63\x30​\x74\x7c\x4e\x20\x7c\​x7c\x3d\x2d\x2d\x20\x​28\x63\x29\x20(\x28\x​63\x29)​?\d\d\d\d/​s·​and·​$virus·​=·​"W97M/​VMPCK.​dd",​·​last·​LINE;​ 
643 »       ​»       ​»       ​/​\x57\x4f\x52\x44\x2f\​x4d\x65\x6c\x69\x73\x​73\x61\x20\x77\x72\x6​9\x74\x74\x65\x6e\x20​\x62\x79\x20\x4b\x77\​x79\x6a\x69\x62\x6f/​s·​and·​$virus·​=·​"W97M/​Melissa.​a\@MM",​·​last·​LINE;​ 
644 »       ​»       ​»       ​/​\x57\x6f\x72\x64\x32\​x30\x30\x30\x2e\x47\x​61\x72\x47\x6c\x65/​s·​and·​$virus·​=·​"W97M/​Hope.​gen",​·​last·​LINE;​ 
645 »       ​»       ​»       ​/​\x6b\x69\x6c\x6c\x65\​x72\x00\x6b\x00\x69\x​00\x6c\x00\x6c\x00\x6​5\x00\x72/​s·​and·​$virus·​=·​"X97M/​Oblivion",​·​last·​LINE;​ 
646 »       ​»       ​}·​elsif($type·​==·​7)​·​{ 
647 »       ​»       ​»       ​if($total==1281)​·​{ 
648 »       ​»       ​»       ​»       ​/​\x25\x53\x79\x73\x74\​x65\x6d\x52\x6f\x6f\x​74\x25\x5c\x53\x79\x7​3\x74\x65\x6d\x33\x32​\x5c\x66\x75\x6e\x74\​x69\x6d\x65\d\d\x2e\x​68\x74\x61/​s·​and·​$virus·​=·​"VBS/​Funtime",​·​last·​LINE;​ 
649 »       ​»       ​»       ​}649 »       ​»       ​»       ​}
650 »       ​»       ​}650 »       ​»       ​}
651 »       ​»       ​$save·​=·​substr($buff,​·​(length($buff)​/​2)​)​;​651 »       ​»       ​$save·​=·​substr($buff,​·​(length($buff)​/​2)​)​;​
652 »       ​}652 »       ​}
653 »       ​close(FILE)​;​653 »       ​close(FILE)​;​
654 »       ​&_set_skip($skip)​·​if($skip)​;​654 »       ​&_set_skip($skip)​·​if($skip)​;​
655 »       ​$suspicious·​=·​0·​if($virus)​;​655 »       ​$suspicious·​=·​0·​if($virus)​;​
/usr/local/lib/perl5/site_perl/man/man3/File::Scan.3.gz
File::Scan.3
Offset 129, 15 lines modifiedOffset 129, 15 lines modified
129 .​·​·​·​·​ds·​ae·​ae129 .​·​·​·​·​ds·​ae·​ae
130 .​·​·​·​·​ds·​Ae·​AE130 .​·​·​·​·​ds·​Ae·​AE
131 .​\}131 .​\}
132 .​rm·​#[·​#]·​#H·​#V·​#F·​C132 .​rm·​#[·​#]·​#H·​#V·​#F·​C
133 .​\"·​=====================​=====================​=====================​=========133 .​\"·​=====================​=====================​=====================​=========
134 .​\"134 .​\"
135 .​IX·​Title·​"Scan·​3"135 .​IX·​Title·​"Scan·​3"
136 .​TH·​Scan·​3·​"2016-​06-​10"·​"perl·​v5.​20.​3"·​"User·​Contributed·​Perl·​Documentation"136 .​TH·​Scan·​3·​"2016-​06-​12"·​"perl·​v5.​20.​3"·​"User·​Contributed·​Perl·​Documentation"
137 .​\"·​For·​nroff,​·​turn·​off·​justification.​·​·​Always·​turn·​off·​hyphenation;​·​it·​makes137 .​\"·​For·​nroff,​·​turn·​off·​justification.​·​·​Always·​turn·​off·​hyphenation;​·​it·​makes
138 .​\"·​way·​too·​many·​mistakes·​in·​technical·​documents.​138 .​\"·​way·​too·​many·​mistakes·​in·​technical·​documents.​
139 .​if·​n·​.​ad·​l139 .​if·​n·​.​ad·​l
140 .​nh140 .​nh
141 .​SH·​"NAME"141 .​SH·​"NAME"
142 File:​:​Scan·​\-​·​Perl·​extension·​for·​Scanning·​files·​for·​Viruses142 File:​:​Scan·​\-​·​Perl·​extension·​for·​Scanning·​files·​for·​Viruses
143 .​SH·​"SYNOPSIS"143 .​SH·​"SYNOPSIS"
Generated by diffoscope 49