[Snort-users] W32/Allim worm

Esler, Joel - Contractor joel.esler at ...9426...
Thu Apr 28 07:04:38 EDT 2005

Keep your eye on bleedingsnort.com, as most new viruses have rules
written for them and posted there.


-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of Biswas,
Sent: Wednesday, April 27, 2005 3:00 PM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] W32/Allim worm

Hi All,
  We were trying to look for a signature for blocking the worm Allim. We
know it goes out on the AIM ports but are not sure if there are any
exact content match available.


To have known the best, and to have known it for the best, is success in

SF.Net email is sponsored by: Tell us your software development plans!
Take this survey and enter to win a one-year sub to SourceForge.net Plus
IDC's 2005 look-ahead and a copy of this survey Click here to start!
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list