[Snort-sigs] Bleedingsnort.com Daily Update

bleeding at ...2727... bleeding at ...2727...
Thu Mar 3 17:00:30 EST 2005


[***] Results from Oinkmaster started Thu Mar  3 20:00:05 2005 [***]

[+++]          Added rules:          [+++]

 2001755 - BLEEDING-EDGE WORM Spybot Variant -- Rogue wumgrs32 (bleeding-virus.rules)
 2001756 - BLEEDING-EDGE P2P Ares File Upload (bleeding-p2p.rules)


[///]     Modified active rules:     [///]

 2001566 - BLEEDING-EDGE Virus Netsky.P Worm detected  (bleeding-virus.rules)
 2001573 - BLEEDING-EDGE Virus Zafi Worm outgoing detected  (bleeding-virus.rules)
 2001578 - BLEEDING-EDGE Sober.I Worm outbound detected (bleeding-virus.rules)
 2001591 - BLEEDING-EDGE Virus NetSky.C Worm - outgoing detected (bleeding-virus.rules)
 2001599 - BLEEDING-EDGE Virus Zafi.D Worm [.zip] - outgoing detected  (bleeding-virus.rules)
 2001601 - BLEEDING-EDGE Virus Zafi.D Worm [.cmd, .com, .pif or .bat] - outgoing detected  (bleeding-virus.rules)
 2001603 - BLEEDING-EDGE Virus Netsky.Z Worm - outgoing detected (bleeding-virus.rules)
 2001752 - BLEEDING-EDGE Virus Bagle.BE Download attempt (bleeding-virus.rules)


[+++]      Added non-rule lines:     [+++]

     -> Added to bleeding-p2p.rules (1):
        #By Smetona

     -> Added to bleeding-sid-msg.map (2):
        2001755 || BLEEDING-EDGE WORM Spybot Variant -- Rogue wumgrs32 || url,securityresponse.symantec.com/avcenter/venc/data/w32.spybot.worm.html
        2001756 || BLEEDING-EDGE P2P Ares File Upload || url,www.aresgalaxy.org

     -> Added to bleeding-virus.rules (1):
        #From Wes Young





More information about the Snort-sigs mailing list