Zynamics has an interesting post on how they can automatically create custom signatures: Memoryze + VxClass vs Zeus. First, it's interesting Mandiant and them seem to be teaming up (one pic shows Mandiant's Memoryze has a setting specifically for Zynamic's VxClass). I'd like to play with VxClass sometime.