[***] Results from Oinkmaster started Tue Nov 8 20:00:05 2005 [***]
[+++] Added rules: [+++]
2002672 - BLEEDING-EDGE CURRENT EVENTS Malware Altered Host - DNS to Malicious
DNS Server (bleeding.rules)
2002673 - BLEEDING-EDGE P2P MS Foldershare Login Detected (bleeding-p2p.rules)
2002674 - BLEEDING-EDGE MALWARE Sony DRM Reporting 2 (bleeding-malware.rules)
2002675 - BLEEDING-EDGE MALWARE Sony DRM Reporting 1 (bleeding-malware.rules)
[///] Modified active rules: [///]
2002669 - BLEEDING-EDGE TROJAN Potential New Spambot Proxy Control Channel --
Please report hits to bleeding-sigs@bleedingsnort.com (bleeding-virus.rules)
[+++] Added non-rule lines: [+++]
-> Added to bleeding-malware.rules (1):
#By Michael Ligh
-> Added to bleeding-p2p.rules (1):
# Submitted by Pedro Quintanilha on 2005-11-07
-> Added to bleeding-sid-msg.map (5):
2002669 || BLEEDING-EDGE TROJAN Potential New Spambot Proxy Control
Channel -- Please report hits to bleeding-sigs@bleedingsnort.com
2002672 || BLEEDING-EDGE CURRENT EVENTS Malware Altered Host - DNS to
Malicious DNS Server || url,isc.sans.org/diary.php?storyid=819
2002673 || BLEEDING-EDGE P2P MS Foldershare Login Detected ||
url,www.foldershare.com
2002674 || BLEEDING-EDGE MALWARE Sony DRM Reporting 2 ||
url,www.sysinternals.com/blog/2005/11/more-on-sony-dangerous-decloaking.html
2002675 || BLEEDING-EDGE MALWARE Sony DRM Reporting 1 ||
url,www.sysinternals.com/blog/2005/11/more-on-sony-dangerous-decloaking.html
[---] Removed non-rule lines: [---]
-> Removed from bleeding-sid-msg.map (1):
2002669 || BLEEDING-EDGE TROJAN Potential New Spambot Proxy Control
Channel -- Please Report hits to bleeding-sigs@bleedingsnort.com
-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
