[Snort-sigs] Bleedingsnort.com Daily Update

bleeding at ...2727... bleeding at ...2727...
Mon Mar 7 17:28:11 EST 2005


[***] Results from Oinkmaster started Mon Mar  7 20:00:16 2005 [***]

[///]     Modified active rules:     [///]

 2001759 - BLEEDING-EDGE Virus Beagle.BK - outbound (bleeding-virus.rules)


[///]    Modified inactive rules:    [///]

 2001760 - BLEEDING-EDGE Virus Beagle.BK - incoming (bleeding-virus.rules)


[+++]      Added non-rule lines:     [+++]

     -> Added to bleeding-sid-msg.map (2):
        2001759 || BLEEDING-EDGE Virus Beagle.BK - outbound || url,securityresponse.symantec.com/avcenter/venc/data/w32.beagle.bk at ...1512...
        2001760 || BLEEDING-EDGE Virus Beagle.BK - incoming || url,securityresponse.symantec.com/avcenter/venc/data/w32.beagle.bk at ...1512... classtype:trojan-activity

     -> Added to bleeding-virus.rules (1):
        #Submitted by Mark Scott, 3/5/2005, for Beagle.BK (changed name from Bagle.BA)

[---]     Removed non-rule lines:    [---]

     -> Removed from bleeding-sid-msg.map (2):
        2001759 || BLEEDING-EDGE Virus Bagle.BA or variant - outbound || url,secunia.com/search/?search=bagle.ba
        2001760 || BLEEDING-EDGE Virus Bagle.BA or variant - incoming || url,secunia.com/search/?search=bagle.ba

     -> Removed from bleeding-virus.rules (1):
        #Submitted by Mark Scott, 3/5/2005, for Bagle.BA or variant





More information about the Snort-sigs mailing list