查询bot语句

submit_time>'2011-04-01' and submit_time<'2011-04-12 16' and (Kaspersky like '%bot%' or McAfee like '%bot%' or Symantec like '%bot%' or Trendmicro like

'%bot%' or Antivir like '%bot%' or Rising like '%bot%' or Sophos like '%bot%' or NOD32 like '%bot%' or Panda like '%bot%' or Grisoft like '%bot%' or

BitDefender like '%bot%' or ClamAV like '%bot%') and Kaspersky not like '%Zbot%' and anchiva not like '%Zbot%' and anchiva not like '%Cycbot%' and

anchiva not like '%Bototer%' and anchiva not like '%Qakbot%' and Kaspersky not like '%Bototer%'  and file_type='EXE-PE'

 

 

submit_time>'2011-04-14' and submit_time<'2011-04-15' and (Kaspersky like '%SpyEye%' or McAfee like '%SpyEye%' or Symantec like '%SpyEye%' or Trendmicro

like '%SpyEye%' or Antivir like '%SpyEye%' or Rising like '%SpyEye%' or Sophos like '%SpyEye%' or NOD32 like '%SpyEye%' or Panda like '%SpyEye%' or

Grisoft like '%SpyEye%' or BitDefender like '%SpyEye%' or ClamAV like '%SpyEye%') and file_type='EXE-PE'

 

 

submit_time>'2011-04-14' and submit_time<'2011-04-15' and (Kaspersky like '%zeus%' or McAfee like '%zeus%' or Symantec like '%zeus%' or Trendmicro like

'%zeus%' or Antivir like '%zeus%' or Rising like '%zeus%' or Sophos like '%zeus%' or NOD32 like '%zeus%' or Panda like '%zeus%' or Grisoft like '%zeus%'

or BitDefender like '%zeus%' or ClamAV like '%zeus%') and file_type='EXE-PE'

 

 

 

submit_time>'2011-04-14' and submit_time<'2011-04-15' and (Kaspersky like '%Palevo%' or McAfee like '%Palevo%' or Symantec like '%Palevo%' or Trendmicro like '%Palevo%' or Antivir like '%Palevo%' or Rising like '%Palevo%' or Sophos like '%Palevo%' or NOD32 like '%Palevo%' or Panda like '%Palevo%' or Grisoft like '%Palevo%' or BitDefender like '%Palevo%' or ClamAV like '%Palevo%') and file_type='EXE-PE'