[Snort-sigs] snort-rules CURRENT update @ Mon Jun 9 09:28:21 2003

bmc at ...95... bmc at ...95...
Mon Jun 9 06:28:31 EDT 2003


This rule update was brought to you by Oinkmaster.

[*] Rule modifications: [*]

  [---]          Removed:          [---]

     file -> virus.rules
     alert tcp any 110 -> any any (msg:"Virus - Possible Zipped Files Trojan"; content:"|6E 61 6D 65 20 3D 22 5A 69 70 70 65 64 5F 46 69 6C 65 73 2E 45 58 45 22|"; reference:MCAFEE,10450; sid:802;  classtype:misc-activity; rev:4;)
     alert tcp any any -> any 25 (msg:"Virus - Possible QAZ Worm Calling Home"; content:"nongmin_cn"; reference:MCAFEE,98775; sid:733;  classtype:misc-activity; rev:3;)





More information about the Snort-sigs mailing list