[***] Results from Oinkmaster started Sat May 14 20:00:03 2005 [***]
[///] Modified active rules: [///]
2001578 - BLEEDING-EDGE VIRUS Sober.I - outbound (bleeding-virus.rules)
2001750 - BLEEDING-EDGE VIRUS Sober.K Worm - outgoing (bleeding-virus.rules)
2001930 - BLEEDING-EDGE Virus Maslan.C - outbound (bleeding-virus.rules)
[///] Modified inactive rules: [///]
2001542 - BLEEDING-EDGE VIRUS Possible Sober.j - outbound
(bleeding-virus.rules)
2001577 - BLEEDING-EDGE VIRUS Sober.I - incoming (bleeding-virus.rules)
2001749 - BLEEDING-EDGE VIRUS Sober.K Worm - incoming (bleeding-virus.rules)
2001931 - BLEEDING-EDGE Virus Maslan.C - inbound (bleeding-virus.rules)
[---] Disabled rules: [---]
2001687 - BLEEDING-EDGE MySQL bot DNS lookup (bleeding-virus.rules)
[+++] Added non-rule lines: [+++]
-> Added to bleeding-sid-msg.map (7):
2001542 || BLEEDING-EDGE VIRUS Possible Sober.j - outbound ||
url,vil.mcafeesecurity.com/vil/content/v_130130.htm
2001577 || BLEEDING-EDGE VIRUS Sober.I - incoming
2001578 || BLEEDING-EDGE VIRUS Sober.I - outbound
2001749 || BLEEDING-EDGE VIRUS Sober.K Worm - incoming ||
url,secunia.com/search/?search=sober.k
2001750 || BLEEDING-EDGE VIRUS Sober.K Worm - outgoing ||
url,secunia.com/search/?search=sober.k
2001930 || BLEEDING-EDGE Virus Maslan.C - outbound ||
url,secunia.com/virus_information/13805/
2001931 || BLEEDING-EDGE Virus Maslan.C - inbound ||
url,secunia.com/virus_information/13805/
[---] Removed non-rule lines: [---]
-> Removed from bleeding-sid-msg.map (7):
2001542 || BLEEDING-EDGE Virus Possible Sober.j Outbound ||
url,vil.mcafeesecurity.com/vil/content/v_130130.htm
2001577 || BLEEDING-EDGE Sober.I Worm - incoming
2001578 || BLEEDING-EDGE Sober.I Worm outbound detected
2001749 || Sober.K Worm - incoming detected ||
url,secunia.com/search/?search=sober.k
2001750 || Sober.K Worm - outgoing detected ||
url,secunia.com/search/?search=sober.k
2001930 || Maslan.C - outbound ||
url,secunia.com/virus_information/13805/
2001931 || Maslan.C - inbound ||
url,secunia.com/virus_information/13805/
-------------------------------------------------------
This SF.Net email is sponsored by Oracle Space Sweepstakes
Want to be the first software developer in space?
Enter now for the Oracle Space Sweepstakes!
http://ads.osdn.com/?ad_id=7393&alloc_id=16281&op=click
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
