[***] Results from Oinkmaster started Mon Mar 13 20:00:13 2006 [***]
[+++] Added rules: [+++]
2002856 - BLEEDING-EDGE Suspicious POST to ROBOTS.TXT (bleeding-malware.rules)
2002857 - BLEEDING-EDGE TROJAN Win32.VB.aie Reporting User Activity
(bleeding-virus.rules)
2002858 - BLEEDING-EDGE Malware Fun Web Products StationaryChooser Spyware
(bleeding-malware.rules)
[///] Modified active rules: [///]
2002843 - BLEEDING-EDGE DOS Microsoft Streaming Server Malformed Request
(bleeding-dos.rules)
2402000 - BLEEDING-EDGE DROP Dshield Block Listed Source
(bleeding-dshield.rules)
2403000 - BLEEDING-EDGE DROP Dshield Block Listed Source - BLOCKING
(bleeding-dshield-BLOCK.rules)
[+++] Added non-rule lines: [+++]
-> Added to bleeding-malware.rules (2):
#by Shirkdog
# Added by Frank Knobbe on 2006-03-12
-> Added to bleeding-sid-msg.map (4):
2002843 || BLEEDING-EDGE DOS Microsoft Streaming Server Malformed
Request || url,www.microsoft.com/technet/security/bulletin/ms00-038.mspx ||
bugtraq,1282
2002856 || BLEEDING-EDGE Suspicious POST to ROBOTS.TXT
2002857 || BLEEDING-EDGE TROJAN Win32.VB.aie Reporting User Activity
2002858 || BLEEDING-EDGE Malware Fun Web Products StationaryChooser
Spyware || url,www.funwebproducts.com
[---] Removed non-rule lines: [---]
-> Removed from bleeding-sid-msg.map (1):
2002843 || BLEEDING-EDGE DOS Microsoft Streaming Server Timing test
data request (Potential) ||
url,www.microsoft.com/technet/security/bulletin/ms00-038.mspx || bugtraq,1282
-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
