[Snort-sigs] Sourcefire VRT Certified Snort Rules Update 2010-09-10
research at ...435...
Fri Sep 10 15:16:34 EDT 2010
-----BEGIN PGP SIGNED MESSAGE-----
Sourcefire VRT Certified Snort Rules Update
The Sourcefire VRT is aware of a virus currently spreading on the
VBMania Mass Mailing Worm
The VBMania mass mailing worm is known to be propagating throughout the
Internet via email. The virus will copy itself to mapped drives on the
victim host and attempt to use MAPI to mail itself to all contacts
found on the system.
Rules to detect attacks by this virus are included in this release and
are identified with GID 1, SIDs 17234 and 17235.
For a complete list of new and modified rules please see:
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
-----END PGP SIGNATURE-----
More information about the Snort-sigs