[***] Results from Oinkmaster started Sat Dec 16 20:00:03 2006 [***]
[+++] Added rules: [+++]
2003216 - BLEEDING-EDGE Malware Conduit Connect Toolbar (Many report to be
benign) (bleeding-malware.rules)
2003217 - BLEEDING-EDGE MALWARE 180solutions (Zango) Spyware Installer Config
2 (bleeding-malware.rules)
2003218 - BLEEDING-EDGE Malware Conduit Connect Toolbar Message Download(Many
report to be benign) (bleeding-malware.rules)
2003219 - BLEEDING-EDGE MALWARE Alexa Spyware Reporting
(bleeding-malware.rules)
2003221 - BLEEDING-EDGE Malware MySearchNow.com Spyware
(bleeding-malware.rules)
2003222 - BLEEDING-EDGE Malware MyWebSearch Toolbar Receiving Config 2
(bleeding-malware.rules)
[///] Modified active rules: [///]
2000600 - BLEEDING-EDGE Malware MyWebSearch Toolbar Receiving Configuration
(bleeding-malware.rules)
2001662 - BLEEDING-EDGE Malware MyWebSearch Toolbar Traffic (Agent)
(bleeding-malware.rules)
2001663 - BLEEDING-EDGE Malware MyWebSearch Toolbar Traffic (host)
(bleeding-malware.rules)
2001872 - BLEEDING-EDGE MALWARE Visicom Spyware User Agent
(bleeding-malware.rules)
2002818 - BLEEDING-EDGE Malware MyWebSearch Toolbar Traffic (general download)
(bleeding-malware.rules)
2002819 - BLEEDING-EDGE Malware MyWebSearch Toolbar Traffic (bin download)
(bleeding-malware.rules)
2002836 - BLEEDING-EDGE Malware MyWebSearch Toolbar Traffic (bar config
download) (bleeding-malware.rules)
2003214 - BLEEDING-EDGE POLICY Pingdom.com Monitoring detected
(bleeding-policy.rules)
2003215 - BLEEDING-EDGE POLICY Pingdom.com Monitoring Node Active
(bleeding-policy.rules)
[+++] Added non-rule lines: [+++]
-> Added to bleeding-malware.rules (1):
#New, from spyware listening post hits
-> Added to bleeding-policy.rules (1):
#Pingdom.com is an otherwise legitimate org that does free distributed
ping monitoring
-> Added to bleeding-sid-msg.map (6):
2003216 || BLEEDING-EDGE Malware Conduit Connect Toolbar (Many report
to be benign) || url,www.conduit.com
2003217 || BLEEDING-EDGE MALWARE 180solutions (Zango) Spyware Installer
Config 2 ||
url,securityresponse.symantec.com/avcenter/venc/data/pf/adware.180search.html
2003218 || BLEEDING-EDGE Malware Conduit Connect Toolbar Message
Download(Many report to be benign) || url,www.conduit.com
2003219 || BLEEDING-EDGE MALWARE Alexa Spyware Reporting
2003221 || BLEEDING-EDGE Malware MySearchNow.com Spyware ||
url,www.mysearchnow.com
2003222 || BLEEDING-EDGE Malware MyWebSearch Toolbar Receiving Config 2
[---] Removed non-rule lines: [---]
-> Removed from bleeding-policy.rules (1):
#Pingdon is an otherwise legitimate org that does free distributed ping
monitoring
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
