[Snort-sigs] Rules for ject and scob worms

Joseph Gama josephgama at ...144...
Thu Jul 8 15:56:08 EDT 2004


Hello,

Here are the rules for the latest worms that attack
IE. It is also useful to know which websites are
spreading the worms because many websites have been
hacked in order to attack visitors with IE.

Thank you!

Peace,
Joseph


		
__________________________________
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
http://promotions.yahoo.com/new_mail
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ject and scob.rules
Type: application/octet-stream
Size: 2148 bytes
Desc: ject and scob.rules
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20040708/44bad45d/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: JECT_AND_SCOB_WORM_INTERNET_EXPLORER_WORM_INSTALLER_LOADER
Type: application/octet-stream
Size: 1428 bytes
Desc: JECT_AND_SCOB_WORM_INTERNET_EXPLORER_WORM_INSTALLER_LOADER
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20040708/44bad45d/attachment-0001.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: JECT_AND_SCOB_WORM_INTERNET_EXPLORER_WORM_INSTALLER_LOADER_2
Type: application/octet-stream
Size: 1437 bytes
Desc: JECT_AND_SCOB_WORM_INTERNET_EXPLORER_WORM_INSTALLER_LOADER_2
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20040708/44bad45d/attachment-0002.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: JECT_AND_SCOB_WORM_INTERNET_EXPLORER_WORM_SHELLSCRIPT
Type: application/octet-stream
Size: 1421 bytes
Desc: JECT_AND_SCOB_WORM_INTERNET_EXPLORER_WORM_SHELLSCRIPT
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20040708/44bad45d/attachment-0003.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: JECT_AND_SCOB_WORM_INTERNET_EXPLORER_WORM_SHELLSCRIPT_2
Type: application/octet-stream
Size: 1437 bytes
Desc: JECT_AND_SCOB_WORM_INTERNET_EXPLORER_WORM_SHELLSCRIPT_2
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20040708/44bad45d/attachment-0004.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: JECT_AND_SCOB_WORM_INTERNET_EXPLORER_WORM_SHELLSCRIPT_3
Type: application/octet-stream
Size: 1408 bytes
Desc: JECT_AND_SCOB_WORM_INTERNET_EXPLORER_WORM_SHELLSCRIPT_3
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20040708/44bad45d/attachment-0005.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: JECT_AND_SCOB_WORM_INTERNET_EXPLORER_WORM_SHELLSCRIPT_4
Type: application/octet-stream
Size: 1425 bytes
Desc: JECT_AND_SCOB_WORM_INTERNET_EXPLORER_WORM_SHELLSCRIPT_4
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20040708/44bad45d/attachment-0006.obj>


More information about the Snort-sigs mailing list