magnus.larsson at ...1524...
Mon Jun 2 05:51:06 EDT 2003
Can anyone help me to write a rule for the virus worm_sobig.c?
It can be found with help of this:
From: (any of the identified recipient addresses)
Subject: (any of the following)
Re: Submited (004756-3463)
Re: Your application
Message Body: Please see the attached file.
Attachment: (any of the following)
I hope someone can help me out.
More information about the Snort-sigs