[Snort-sigs] Bleedingsnort.com Daily Update

bleeding at ...2727... bleeding at ...2727...
Sat Mar 5 17:01:15 EST 2005


[***] Results from Oinkmaster started Sat Mar  5 20:00:04 2005 [***]

[+++]          Added rules:          [+++]

 2001757 - BLEEDING_EDGE VIRUS BagleDl-M SMTP Outbound (bleeding-virus.rules)
 2001758 - BLEEDING-EDGE VIRUS BagleDl-M SMTP Inbound (bleeding-virus.rules)
 2001759 - BLEEDING-EDGE Virus Bagle.BA or variant - outbound (bleeding-virus.rules)
 2001760 - BLEEDING-EDGE Virus Bagle.BA or variant - incoming (bleeding-virus.rules)


[+++]      Added non-rule lines:     [+++]

     -> Added to bleeding-sid-msg.map (4):
        2001757 || BLEEDING_EDGE VIRUS BagleDl-M SMTP Outbound || url,www.sophos.com/virusinfo/analyses/trojbagledlm.html
        2001758 || BLEEDING-EDGE VIRUS BagleDl-M SMTP Inbound || url,www.sophos.com/virusinfo/analyses/trojbagledlm.html
        2001759 || BLEEDING-EDGE Virus Bagle.BA or variant - outbound || url,secunia.com/search/?search=bagle.ba
        2001760 || BLEEDING-EDGE Virus Bagle.BA or variant - incoming || url,secunia.com/search/?search=bagle.ba

     -> Added to bleeding-virus.rules (2):
        #Submitted by Mark Scott, 3/5/2005, for Bagle.BA or variant
        #Submitted by Mark Tombaugh, 3/5/2005, for BagleD1-M





More information about the Snort-sigs mailing list