GET /configurations/macosx/xprotect/3/clientConfiguration.plist HTTP/1.1 Host: configuration.apple.com User-Agent: XProtectUpdater (unknown version) CFNetwork/596.2.3 Darwin/12.2.1 (x86_64) (iMac13%2C1) Accept: */* Accept-Language: en-us Accept-Encoding: gzip, deflate If-Modified-Since: Sat, 02 Feb 2013 00:25:49 GMT If-None-Match: "a181-4d4b2e6d79d40" Connection: keep-alive HTTP/1.1 200 OK Last-Modified: Fri, 08 Feb 2013 00:54:09 GMT ETag: "a181-4d52bff37ce40" Server: Apache Accept-Ranges: bytes Content-Length: 41345 Content-Type: text/plain Content-Language: en-us Cache-Control: max-age=41 Expires: Fri, 08 Feb 2013 14:30:04 GMT Date: Fri, 08 Feb 2013 14:29:23 GMT Connection: keep-alive ----- BEGIN SIGNATURE ----- MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAaCA JIAEOi+qBbNkDp0nAQAAAAAAAAAAAAAuAAAAAAAAACYAAAAAAAAAAJHarIA+r9I/ EGSHX2QjQcPjlx+9EJgAAAAAAACgggk3MIIEETCCAvmgAwIBAgIBEjANBgkqhkiG 9w0BAQUFADBiMQswCQYDVQQGEwJVUzETMBEGA1UEChMKQXBwbGUgSW5jLjEmMCQG A1UECxMdQXBwbGUgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxFjAUBgNVBAMTDUFw cGxlIFJvb3QgQ0EwHhcNMDcwMjE0MjExOTE5WhcNMTUwMjE0MjExOTE5WjB/MQsw CQYDVQQGEwJVUzETMBEGA1UEChMKQXBwbGUgSW5jLjEmMCQGA1UECxMdQXBwbGUg Q2VydGlmaWNhdGlvbiBBdXRob3JpdHkxMzAxBgNVBAMTKkFwcGxlIENvZGUgU2ln bmluZyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKKoEXH/DvkLa/glDZiBXWtZvVobibPn5e7OOZgjNTlInyGr J9nunCDwZDgIawynz9xQth0GxFvxXRqbVGWGcy9i5Ti9ARBkcm18aUdhnBAFJuPr hcIsJNxqwj+I/MysKUyhSXkRmnV25R640NIJtExTePvfGHahj6SpMsqRp7b6l705 qs0bUBGIq2rt62bKIEusOy3vqufWyYgtacKkKmEv24cC86EhuUyfDvj52S3KcgR/ Ha5u+j+Is8yjQO4XhxhRlrzP5C2twulZTl0cZTMnA6pno5Mkh8eHeQK5XZizDu7N aQg+jEiSJLJt1zC+z9jkyKeXgdAeI9w4mV9h/oUCAwEAAaOBtDCBsTAOBgNVHQ8B Af8EBAMCAYYwFgYDVR0lAQH/BAwwCgYIKwYBBQUHAwMwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUjmmmxHdCTgSlVkKcUR+G2tIgjwkwHwYDVR0jBBgwFoAUK9Bp R5R2Cf70a40uQKb3R01/CF4wNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL3d3dy5h cHBsZS5jb20vYXBwbGVjYS9yb290LmNybDANBgkqhkiG9w0BAQUFAAOCAQEAoWO/ lExyGdGmSxFYnX7NEcyry/Kj0LwnMPWdPR/gxq1h+++FgVadCX1sEMHZnVJi1iQO Hevk6TC10Yti/2o/W5yNRLoCsd6ru7jlGQL85Y/brUs/xsBRS0s6SWFO+NWAes7E vluDrM5XtLVi/CpGncj30wCctdeoNz84CoU4QsFd46ua/c5WhD5D8ArUxAutJyLN BVcSwRIWOnZHlrKcMDyvOXMWYsyhzAVHy58hK8Vv+PNXNpbtZuONmUTaNIIY8fkD yUX7WQ4gWCcpHzejrYxkotrjqxe1Q/6b3B9mKWQSXq8rLfQ//kJ/cJKrf0uH4yKz rB9oAOESApDNpIP0bzCCBR4wggQGoAMCAQICAQEwDQYJKoZIhvcNAQEFBQAwfzEL MAkGA1UEBhMCVVMxEzARBgNVBAoTCkFwcGxlIEluYy4xJjAkBgNVBAsTHUFwcGxl IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MTMwMQYDVQQDEypBcHBsZSBDb2RlIFNp Z25pbmcgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMDcwMjIzMjIwMjU2WhcN MTUwMTE0MjIwMjU2WjBWMQswCQYDVQQGEwJVUzETMBEGA1UEChMKQXBwbGUgSW5j LjEXMBUGA1UECxMOQXBwbGUgU29mdHdhcmUxGTAXBgNVBAMTEFNvZnR3YXJlIFNp Z25pbmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TRAZ7x3p8pF6 YS9d3TOksE4Cq/X3RQEQLqHCtzu2gnPff0Rgz6zEQdbtvo454ssx+k2d2bjkPbaT +kEPAx+NYwiamMHmmXqyhybStS8EJiFJbscEdlIUiSIPKRTVBRAtfOp822akXW55 Fwrt4jI7ZKM6KqhLzUVBMyV8az2pYksXn1/o0xQeowI7yyDmGNjuk/h7fI4F7YvC fX20Uze25pnwLBz5n21u1PvqJR/nnzaKCvFzPQD1AtKs0OpTRahL28PHv/rriJf0 oXx7EsCjYSiZm3RF13cnr6JdctZ1UywXrVYzwxLiHphb7dn+Ux8dUq+uqUD3VdvX /eG/op4DAgMBAAGjggHMMIIByDAOBgNVHQ8BAf8EBAMCB4AwDAYDVR0TAQH/BAIw ADAWBgNVHSUBAf8EDDAKBggrBgEFBQcDAzAdBgNVHQ4EFgQUC7pzwVPowPshu3Az hTgENkOoTOwwHwYDVR0jBBgwFoAUjmmmxHdCTgSlVkKcUR+G2tIgjwkwggEPBgNV HSAEggEGMIIBAjCB/wYJKoZIhvdjZAUBMIHxMCkGCCsGAQUFBwIBFh1odHRwOi8v d3d3LmFwcGxlLmNvbS9hcHBsZWNhLzCBwwYIKwYBBQUHAgIwgbYagbNSZWxpYW5j ZSBvbiB0aGlzIGNlcnRpZmljYXRlIGJ5IGFueSBwYXJ0eSBhc3N1bWVzIGFjY2Vw dGFuY2Ugb2YgdGhlIHRoZW4gYXBwbGljYWJsZSBzdGFuZGFyZCB0ZXJtcyBhbmQg Y29uZGl0aW9ucyBvZiB1c2UsIGNlcnRpZmljYXRlIHBvbGljeSBhbmQgY2VydGlm aWNhdGlvbiBwcmFjdGljZSBzdGF0ZW1lbnRzLjA9BgNVHR8ENjA0MDKgMKAuhixo dHRwOi8vd3d3LmFwcGxlLmNvbS9hcHBsZWNhL2NvZGVzaWduaW5nLmNybDANBgkq hkiG9w0BAQUFAAOCAQEAmStcXzWsGZQkcirnLjvJf5yrKeG6g/61LPb6TXxqQFrS bLCSKqF/q1mBRefJeqHCykkk3bR1sOzujGfSHd3GN1O8l0Y7outLa1c0+O/h3Jcv sUp3Ey5OsHwgILQv3VTprt8hzEQS15nfVw9QgCnr3OaKCzvy9w2cuwm3xEdJdZJD IsjAUA/WwH8hQu73jsmZhwxlH8ZAqx7fKdnni5BxvZF+ywd1TMikXxSMecUP6vE5 kcncEBH20jmDK7Ea1B0h6vKqlWKf8vvpGXBRAfSYoOCl/3yrGnrqf43XI3KvfM0Z VT3WH21m2OZzo7PABiAWYcw7fnQPHsdlANZRVnnJgTGCAawwggGoAgEBMIGEMH8x CzAJBgNVBAYTAlVTMRMwEQYDVQQKEwpBcHBsZSBJbmMuMSYwJAYDVQQLEx1BcHBs ZSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEzMDEGA1UEAxMqQXBwbGUgQ29kZSBT aWduaW5nIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AgEBMAkGBSsOAwIaBQAwDQYJ KoZIhvcNAQEBBQAEggEAJMuLNMIkQTaou4EOtFPi4gqihoQ7yBBot8u9eadl88Fc MSBq41dBV2N+EBXNtyjrDc+ej7FR3T/2HSVTXGv4zvYL3u6+0wee3Mpu/qyZFDBJ VTKxAGHEn79ckVDTc00UHJCwVA2UvRLH9vBXO4p2NBHxC3cKBHvb6h/HlJDg2XwM DIfcpeOuKIPTbEC/JD3KXQ622ZFYMMvgg/c49CKYFfRGkQIISkR6VSh4+sAOUdXM 3y0l9mwaipHR+/CALyAYebqrTgD39ts38/TEVsfvKsl5jMBzmlYdUmckhFeO2sYl wIxdLAdF241WSMzce+qEqvsyFPFBtO0Ctp5yG0S6yAAAAAAAAA== ----- END SIGNATURE ----- meta Version 2029 PlugInBlacklist 10 com.macromedia.Flash Player.plugin MinimumPlugInBundleVersion 11.5.502.149 com.oracle.java.JavaAppletPlugin MinimumPlugInBundleVersion 1.7.11.22 JavaWebComponentVersionMinimum 1.6.0_37-b06-435 data Description OSX.RSPlug.A Matches MatchFile NSURLNameKey Archive.bom MatchType Match Pattern 4D6F7A696C6C61706C75672E706C7567696E00*5665726966696564446F776E6C6F6164506C7567696E00*5665726966696564446F776E6C6F6164506C7567696E2E7273726300 MatchFile NSURLNameKey Info.plist MatchType Match Pattern 3C6B65793E4946506B67466C616744656661756C744C6F636174696F6E3C2F6B65793E*3C737472696E673E2F4C6962726172792F496E7465726E657420506C75672D496E732F3C2F737472696E673E MatchFile NSURLNameKey preinstall MatchType Match Pattern 23212F62696E2F{-2}7368 LaunchServices LSItemContentType com.apple.installer-package Description OSX.Iservice.A Matches MatchType Match Pattern 27666F72272073746570206D7573742062652061206E756D6265720025733A25753A206661696C656420617373657274696F6E20602573270A0000002F55736572732F6A61736F6E2F64696172726865612F6165732F6165735F6D6F6465732E63000000625F706F73203D3D2030000062616E0036392E39322E3137372E3134363A3539323031007177666F6A7A6C6B2E66726565686F737469612E636F6D3A31303234000000007374617274757000666600002C000000726F6F74000000002F62696E2F7368 MatchFile NSURLTypeIdentifierKey public.unix-executable LaunchServices LSItemContentType com.apple.installer-package Description OSX.Iservice.B Matches MatchType Match Pattern 27666F72272073746570206D7573742062652061206E756D6265720025733A25753A206661696C656420617373657274696F6E20602573270A0000002F55736572732F6A61736F6E2F64696172726865612F6165732F6165735F6D6F6465732E63000000625F706F73203D3D2030000062616E0036392E39322E3137372E3134363A3539323031007177666F6A7A6C6B2E66726565686F737469612E636F6D3A31303234000000007374617274757000666600002C000000726F6F74000000002F62696E2F7368 MatchFile NSURLNameKey A program NSURLTypeIdentifierKey public.unix-executable LaunchServices LSItemContentType com.apple.application-bundle Description OSX.HellRTS Matches MatchType Match Identity qNzMoqc0sjpk3utUxnQWEUZyMKg= MatchFile NSURLNameKey rbframework.dylib NSURLTypeIdentifierKey com.apple.mach-o-dylib MatchType Match Identity eX17YAgTaOUMt9icXVHF0meoiog= MatchFile NSURLNameKey RBShell.rbx_0.129.dylib NSURLTypeIdentifierKey com.apple.mach-o-dylib MatchType Match Pattern 656C6C5261697365722053657276657200165F44454255475F4C4F475F505249564154452E747874*5374617274536572766572203E20212053455256455220524553544152544544*2F7573722F62696E2F64656661756C7473207772697465206C6F67696E77696E646F77204175746F4C61756E636865644170706C69636174696F6E44696374696F6E617279202D61727261792D61646420273C646963743E3C6B65793E486964653C2F6B65793E3C00192F3E3C6B65793E506174683C2F6B65793E3C737472696E673E00113C2F737472696E673E3C2F646963743E27*48656C6C52616973657220536572766572 MatchFile NSURLTypeIdentifierKey {dyn.*} LSDownloadContentTypeKey com.apple.mach-o-executable LaunchServices LSItemContentType com.apple.application-bundle Description OSX.HellRTS Matches MatchType MatchAny Matches MatchType Match Identity qK+o5ka9agLPqoRHNblMUIILufU= MatchFile NSURLTypeIdentifierKey com.apple.application-file MatchType Match Identity C6WPVLRLLuih8Unhpobe7t67ebo= MatchFile NSURLTypeIdentifierKey com.apple.application-file LaunchServices LSItemContentType com.apple.application-file Description OSX.OpinionSpy Matches MatchType Match Pattern 504B010214000A0000000800547D8B3B9B0231BC{4}502D0700250000000000{12}636F6D2F697A666F7267652F697A7061636B2F70616E656C732F706F696E7374616C6C6572 MatchFile NSURLTypeIdentifierKey com.sun.java-archive LaunchServices LSItemContentType {(com.sun.java-archive|com.apple.application-bundle)} Description OSX.MacDefender.A Matches MatchFile NSURLNameKey Info.plist MatchType Match Pattern 3C6B65793E434642756E646C654964656E7469666965723C2F6B65793E*3C737472696E673E636F6D2E41564D616B6572732E*2E706B673C2F737472696E673E MatchFile NSURLNameKey Archive.bom MatchType Match Pattern 436F6E74726F6C43656E746572442E6E6962*5669727573466F756E642E706E67*57616C6C65742E706E67*61666669642E747874 LaunchServices LSItemContentType com.apple.installer-meta-package Description OSX.MacDefender.B Matches MatchFile NSURLNameKey Info.plist MatchType Match Pattern 4946506B67466C6167417574686F72697A6174696F6E416374696F6E3C2F6B65793E0A093C737472696E673E4E6F417574686F72697A6174696F6E3C2F737472696E673E0A093C6B65793E4946506B67466C616744656661756C744C6F636174696F6E3C2F6B65793E0A093C737472696E673E2F4170706C69636174696F6E733C2F737472696E673E0A09 MatchFile NSURLNameKey postinstall MatchType Match Pattern 2F62696E2F7368*6F70656E202F4170706C69636174696F6E732F MatchType MatchAny Matches MatchFile NSURLNameKey Archive.bom MatchType Match Pattern 436F6E74656E7473*496E666F2E706C697374*4D61634F53*5265736F7572636573*0000(0AF101134A4495|0B20012B644D93|0B1F01B1239428|0B1F0158C4CC11)000000000000000000000008446F776E6C6F6164506963742E706E6700000000 MatchType MatchAll Matches MatchType Match Identity A/ziWngj5jE5dSUGZo7t7a5NM7c= MatchFile NSURLNameKey Description.plist MatchType Match Identity Dc6s0ettJRWbv5QIv6C3XdDqwYE= MatchFile NSURLNameKey Archive.sizes MatchType MatchAll Matches MatchType Match Identity EZHtIrPzp1eODO34mT9tZHpzArE= MatchFile NSURLNameKey Description.plist MatchType Match Identity Dc6s0ettJRWbv5QIv6C3XdDqwYE= MatchFile NSURLNameKey Archive.sizes MatchType MatchAll Matches MatchType Match Identity X9R+I746Ki3lJjmMU7wn68R5TmE= MatchFile NSURLNameKey Description.plist MatchType Match Identity Dc6s0ettJRWbv5QIv6C3XdDqwYE= MatchFile NSURLNameKey Archive.sizes MatchType MatchAll Matches MatchType Match Identity axtdeZu8dm9WTIOMlluvLKMVAt8= MatchFile NSURLNameKey Description.plist MatchType Match Identity Dc6s0ettJRWbv5QIv6C3XdDqwYE= MatchFile NSURLNameKey Archive.sizes MatchType MatchAll Matches MatchType Match Identity frVwL3BuNwztkQ3TD3P+8+clwrs= MatchFile NSURLNameKey Description.plist MatchType Match Identity eBXEPt1DHW8KltqOFmNH827p+TI= MatchFile NSURLNameKey Archive.sizes MatchType MatchAll Matches MatchType Match Identity oXJzipG62llnEB6dPX7y98BYt1s= MatchFile NSURLNameKey Description.plist MatchType Match Identity Dc6s0ettJRWbv5QIv6C3XdDqwYE= MatchFile NSURLNameKey Archive.sizes MatchType MatchAll Matches MatchType Match Identity s1ACH4D/bazTGlPYRG0h4zPmh5A= MatchFile NSURLNameKey Description.plist MatchType Match Identity Dc6s0ettJRWbv5QIv6C3XdDqwYE= MatchFile NSURLNameKey Archive.sizes MatchType MatchAll Matches MatchType Match Identity 64dqT9iT/VTaEFfYVPUEP2wUS2c= MatchFile NSURLNameKey Description.plist MatchType Match Identity NZYHDtwLrc+eKfSxFy8AzruGM5Y= MatchFile NSURLNameKey Archive.sizes MatchType MatchAll Matches MatchType Match Identity jPzhuB4DJCw23krUUPGZ9vTXaEE= MatchFile NSURLNameKey Description.plist MatchType Match Identity Dc6s0ettJRWbv5QIv6C3XdDqwYE= MatchFile NSURLNameKey Archive.sizes LaunchServices LSItemContentType com.apple.installer-package Description OSX.QHost.WB.A Matches MatchFile NSURLNameKey Info.plist MatchType Match Pattern 3C6B65793E434642756E646C654964656E7469666965723C2F6B65793E0A093C737472696E673E636F6D2E466C617368506C617965722E666C617368706C617965722E706B673C2F737472696E673E*3C6B65793E4946506B67466C6167417574686F72697A6174696F6E416374696F6E3C2F6B65793E0A093C737472696E673E526F6F74417574686F72697A6174696F6E3C2F737472696E673E MatchFile NSURLNameKey preinstall MatchType Match Identity loQw8VAPxHW2UH88HVdXFMeFgBo= LaunchServices LSItemContentType com.apple.installer-package Description OSX.Revir.A Matches MatchFile NSURLTypeIdentifierKey public.unix-executable MatchType Match Identity YLDvA7ZdCOTqdTxjqT0mRn6blT4= LaunchServices LSItemContentType public.unix-executable Description OSX.FlashBack.A Matches MatchType MatchAny Matches MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 200000 MatchType Match Identity TMog/+ZBOjQXbaq5sHO81/eKArk= MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 200000 MatchType Match Identity K2nXClXm7/yr5TFzNMCcg+jWFes= MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 200000 MatchType Match Identity vV5UHuCuughPELEUlFnbeJhnfkA= MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 200000 MatchType Match Identity Az3la6fU5RmIOFMMdcdXDNWZbag= MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 200000 MatchType Match Identity qZ9lHNzvN2ZXJXbF2rWLpIwIGcA= MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 200000 MatchType Match Identity baJv0gq7SBXFb2OJJNyCz2ymXK8= MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 200000 MatchType Match Identity /9zY+0aX1MiFE7mcx0jnPPUPkYY= MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 200000 MatchType Match Identity AmEHCVs2fXwSSe9601bs1hPr6BQ= MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 200000 MatchType Match Identity AqNeLvPM31DQdVsntCwh6M6FfQk= LaunchServices LSItemContentType com.apple.installer-package-archive Description OSX.DevilRobber.A Matches MatchType Match Pattern 504C4953545F4E414D453D2224484F4D452F4C6962726172792F4C61756E63684167656E74732F636F6D2E6170706C652E6C6567696F6E2E706C69737422*63686D6F64202B78202224484F4D452F244D41494E5F4449522F24455845435F4E414D4522*636F6D2E6170706C652E6C6567696F6E MatchFile NSURLTypeIdentifierKey public.unix-executable NSURLNameKey preflight MatchType Match Pattern 3C6B65793E434642756E646C6545786563757461626C653C2F6B65793E*3C737472696E673E707265666C696768743C2F737472696E673E MatchFile NSURLNameKey Info.plist MatchType Match Pattern 446961626C6F4D696E65722F7461726765742F446961626C6F4D696E65722E6A6172 MatchFile NSURLTypeIdentifierKey public.zip-archive LaunchServices LSItemContentType com.apple.application-bundle Description OSX.FlashBack.B Matches MatchType MatchAny Matches MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 200000 MatchType Match Identity /XgQtEWKWDzKnGEL31pBgbrrIjM= MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 200000 MatchType Match Identity cASuxrgZO4w+gDLXINwSGyO5Ibc= MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 200000 MatchType Match Identity uHqU3dk/wDYhUFb7vtkjgO78rcI= MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 200000 MatchType Match Identity P0DI2TvH0y08SO7azAzUEc8nPbo= MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 300000 MatchType Match Identity 4mbdhWAIhjcE3Zr3YIpYE32JNro= MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 300000 MatchType Match Identity e21e3wSjV9Ej8tohnwx8CF/6Z/w= MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 300000 MatchType Match Identity KESEsTAi6AmVa7ILa6dBvSwKcRc= LaunchServices LSItemContentType com.apple.installer-package-archive Description OSX.DevilRobber.B Matches MatchType Match Pattern 455845435F4E414D453D*53485F4E414D453D*415243484956455F4E414D453D*504C4953545F4E414D453D2224484F4D452F4C6962726172792F4C61756E63684167656E74732F636F6D2E6170706C652E6D6F707065722E706C697374220A*63686D6F64202B78202224484F4D452F244D41494E5F4449522F24455845435F4E414D4522*63686D6F64202B78202224484F4D452F244D41494E5F4449522F645F73746172742E736822*3C737472696E673E636F6D2E6170706C652E6D6F707065723C2F737472696E673E MatchFile NSURLNameKey {(preflight)|(EvoCam*)} NSURLTypeIdentifierKey public.unix-executable MatchType Match Pattern 645F73746172742E7368*645F73746F702E7368 MatchFile NSURLTypeIdentifierKey public.data LaunchServices LSItemContentType com.apple.application-bundle Description OSX.FlashBack.C Matches MatchType MatchAny Matches MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 300000 MatchType Match Identity EvgU74JYyqK4S/djr4Mz5zi133Y= MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 300000 MatchType Match Identity Ex2yZoTPoXpnX1/5pnqCzihkrJU= MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 300000 MatchType Match Identity FA+6TK+io9/xKMXM7rEs4+hG+is= MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 300000 MatchType Match Identity WF4eiqSGgLosTBWcakIvBaXKHlw= MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 300000 MatchType Match Identity OStrEQzsGWAEYGHTfKA2jRx2nGU= MatchFile NSURLTypeIdentifierKey com.apple.installer-package-archive NSURLFileSizeKey 300000 MatchType Match Identity uVoqmhWmfB9N/OHz7o70Qp+GdHw= LaunchServices LSItemContentType com.apple.installer-package-archive Description OSX.FileSteal.i Matches MatchFile NSURLNameKey FileBackup.ini MatchType Match Pattern 3C55524C3E*3C2F55524C3E*3C455854454E53494F4E3E*3C2F455854454E53494F4E3E MatchFile NSURLTypeIdentifierKey public.unix-executable NSURLNameKey FileBackup MatchType Match Pattern 46696C654261636B757041707044656C6567617465*5461736B57726170706572*2F7573722F62696E2F6375726C*5A697055706C6F6164 LaunchServices LSItemContentType com.apple.application-bundle Description OSX.Revir.ii Matches MatchFile NSURLTypeIdentifierKey public.unix-executable NSURLFileSizeKey 50000 NSURLNameKey FileAgent MatchType Match Identity IBluqsC/YMoRhKUXuItWS/gNZLI= LaunchServices LSItemContentType com.apple.application-bundle Description OSX.Mdropper.i Matches MatchFile NSURLTypeIdentifierKey com.microsoft.word.doc MatchType Match Pattern 2F746D702F6C61756E63682D6873002F746D702F6C61756E63682D687365002F746D702F*0023212F62696E2F73680A2F746D702F6C61756E63682D68736520260A6F70656E202F746D702F66696C652E646F6320260A0A*00005F5F504147455A45524F00*005F5F6D685F657865637574655F686561646572 LaunchServices LSItemContentType com.microsoft.word.doc Description OSX.FkCodec.i Matches MatchFile NSURLNameKey installer.plist NSURLTypeIdentifierKey com.apple.property-list MatchType Match Pattern 3C6B65793E6E616D653C2F6B65793E0A093C646963743E0A09093C6B65793E656E3C2F6B65793E0A09093C737472696E673E436F6465632D4D3C2F737472696E673E0A093C2F646963743E0A093C6B65793E76657273696F6E3C2F6B65793E MatchFile NSURLNameKey Codec-M.tar NSURLTypeIdentifierKey public.tar-archive MatchType Match Pattern 636F6D2E7768697465736D6F6B652E*7B45454637333633322D413038352D346664332D413737382D4543443832433843423239377D LaunchServices LSItemContentType com.apple.application-bundle Description OSX.MaControl.i Matches MatchFile NSURLTypeIdentifierKey public.unix-executable NSURLFileSizeKey 110000 NSURLNameKey iCnat MatchType Match Identity iob/gI0JDUACAaH5TY9wap2hFso= LaunchServices LSItemContentType com.apple.application-bundle Description OSX.Revir.iii LaunchServices LSItemContentType com.apple.application-bundle Matches MatchType Match MatchFile NSURLNameKey FileAgent NSURLTypeIdentifierKey public.unix-executable Identity Jl2v0JeMCzJUsawn2+21lZNyLS0= Description OSX.Revir.iv LaunchServices LSItemContentType com.apple.application-bundle Matches MatchType Match MatchFile NSURLNameKey FileAgent NSURLTypeIdentifierKey public.unix-executable Identity eCMS23ZqQjN68wCTov01ju7Zf1M= Description OSX.SMSSend.i LaunchServices LSItemContentType com.apple.application-bundle Matches MatchType Match MatchFile NSURLNameKey AutoExtract NSURLTypeIdentifierKey public.unix-executable Identity bCtHOEIp66bzmMdKC6FRazpnRyM=