[Snort-sigs] Pentagone Virus/Worm/Bleah

Mark Canter marcus at ...64...
Tue Dec 4 12:52:05 EST 2001

For anyone that wants to count those worm statistics (simple, crude,
lacking reference points, but gets the job done)...

alert tcp any any -> any 25 (msg:"Virus - Possible Pentagone virus";
content:"name="; content:"Gone.scr" nocase; classtype:misc-activity;

More information about the Snort-sigs mailing list