Detect-It-Easy/db_extra/PE/FlashBack_Protector.2.sg

// DIE's signature file
// Author: hypn0 <hypn0@mail.ru>

init("protector", "FlashBack");

function detect() {
    if (PE.compareEP("60609c8cc932c9e3$$9d6190609061eb$$558bec83c4..b8........e8")) {
        sVersion = "1.0";
        bDetected = true;
    }

    return result();
}