[***] Results from Oinkmaster started Mon Sep 12 20:00:05 2005 [***]
[+++] Added rules: [+++]
2001235 - BLEEDING-EDGE MALWARE Weatherbug (bleeding-malware.rules)
2001267 - BLEEDING-EDGE MALWARE Weatherbug Capture (bleeding-malware.rules)
2002364 - BLEEDING-EDGE MALWARE Weatherbug Wxbug Capture
(bleeding-malware.rules)
[///] Modified active rules: [///]
2002053 - BLEEDING-EDGE VIRUS Mytob.HF - outbound (bleeding-virus.rules)
2002082 - BLEEDING-EDGE MALWARE Infotriever Spyware User Agent
(bleeding-malware.rules)
2002313 - BLEEDING-EDGE WEB Cacti graph_image.php Remote Command Execution
Attempt (bleeding-web.rules)
[///] Modified inactive rules: [///]
2002054 - BLEEDING-EDGE VIRUS Mytob.HF - incoming (bleeding-virus.rules)
[---] Removed rules: [---]
2001235 - BLEEDING-EDGE Weatherbug (bleeding-policy.rules)
2001267 - BLEEDING-EDGE Weatherbug Capture (bleeding-policy.rules)
[+++] Added non-rule lines: [+++]
-> Added to bleeding-malware.rules (2):
# Weatherbug - Dale Handy, PE
#by M Shirk
-> Added to bleeding-sid-msg.map (5):
2001235 || BLEEDING-EDGE MALWARE Weatherbug
2001267 || BLEEDING-EDGE MALWARE Weatherbug Capture
2002082 || BLEEDING-EDGE MALWARE Infotriever Spyware User Agent ||
url,www.bleedingsnort.com/staticpages/index.php?page=unknown
2002313 || BLEEDING-EDGE WEB Cacti graph_image.php Remote Command
Execution Attempt || bugtraq,14042 || bugtraq,14129 || cve,CAN-2005-1524
2002364 || BLEEDING-EDGE MALWARE Weatherbug Wxbug Capture
[---] Removed non-rule lines: [---]
-> Removed from bleeding-policy.rules (1):
# Weatherbug - Dale Handy, PE
-> Removed from bleeding-sid-msg.map (4):
2001235 || BLEEDING-EDGE Weatherbug
2001267 || BLEEDING-EDGE Weatherbug Capture
2002082 || BLEEDING-EDGE Infotriever Spyware User Agent ||
url,www.bleedingsnort.com/staticpages/index.php?page=unknown
2002313 || BLEEDING-EDGE WEB Cacti graph_image.php Remote Command
Execution Attempt || bugtraq,14129 || cve,CAN-2005-1524
-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
