[Snort-sigs] Sourcefire VRT Certified Snort Rules Update 2010-09-10

Research research at ...435...
Fri Sep 10 15:16:34 EDT 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Sourcefire VRT Certified Snort Rules Update

Synopsis:
The Sourcefire VRT is aware of a virus currently spreading on the
Internet.

Details:
VBMania Mass Mailing Worm
The VBMania mass mailing worm is known to be propagating throughout the
Internet via email. The virus will copy itself to mapped drives on the
victim host and attempt to use MAPI to mail itself to all contacts
found on the system.

Rules to detect attacks by this virus are included in this release and
are identified with GID 1, SIDs 17234 and 17235.

For a complete list of new and modified rules please see:

http://www.snort.org/vrt/docs/ruleset_changelogs/changes-2010-09-10.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)

iD8DBQFMioB1QcQOxItLLaMRApx9AJ0dM7l88iPZvV61y1ideLAw9PcY8ACfXMBA
DZfrsuQ6a6jcIdu2frBPlmQ=
=k6gR
-----END PGP SIGNATURE-----





More information about the Snort-sigs mailing list