Yes I do. The Zlob variants that Spyerase targets only generates a certain
pattern of various file names and only in certain directories. After adding
all those file new names it is very easy to see the pattern. It is the very
basics of how the signature detections work except it is more direct. It
removes the files from the folders and the registry. There are a lot it
removes that others miss including SAS. As much as I don't like Nick I still
send him samples that I find that SAS misses.

--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker,David H. Lipman, Max M Wachtell III aka
What's in a Name?,Fitz,
Rhonda Lea Kirk,Meat Plow, F Kwatu F, George Orwell



"Dustin Cook" <spamfilterineffect.see.sig@nowhere.com> wrote in message
news:Xns989DEEFDA48F2HHI2948AJD832@69.28.186.121.. .
> "pcbutts1" <pcbutts1@****leythosthestalker.com> wrote in
> news:PvadndU5vsVi-
> xrYnZ2dnUVZ_sGqnZ2d@giganews.com:
>
>>
>>>
>>
>
> Wildcards? PCButts, you could put innocent files at risk doing this. You
> don't have any real way of knowing if the file your deleting is actually
> malware doing it the way you are.
>
>
>
> --
> Dustin Cook
> Author of BugHunter - MalWare Removal Tool -V1.9.4
> web: http://bughunter.it-mate.co.uk
> email: bughunter.dustin@gmail.com.removethis
> Last updated: December 18th, 2006
>