[Snort-users] W32/Allim worm

Esler, Joel - Contractor joel.esler at ...9426...
Thu Apr 28 07:04:38 EDT 2005


Keep your eye on bleedingsnort.com, as most new viruses have rules
written for them and posted there.

J

-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of Biswas,
Proneet
Sent: Wednesday, April 27, 2005 3:00 PM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] W32/Allim worm


Hi All,
  We were trying to look for a signature for blocking the worm Allim. We
know it goes out on the AIM ports but are not sure if there are any
exact content match available.

Thanks


----------------------------------------------
To have known the best, and to have known it for the best, is success in
life. 




-------------------------------------------------------
SF.Net email is sponsored by: Tell us your software development plans!
Take this survey and enter to win a one-year sub to SourceForge.net Plus
IDC's 2005 look-ahead and a copy of this survey Click here to start!
http://www.idcswdc.com/cgi-bin/survey?id5hix
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=ort-users




More information about the Snort-users mailing list