[prev in list] [next in list] [prev in thread] [next in thread] 

List:       emerging-sigs
Subject:    [Emerging-Sigs] Emerging Threats Daily Signature Changes
From:       emerging () emergingthreats ! net (emerging () emergingthreats ! net)
Date:       2008-10-31 20:00:08
Message-ID: 20081031200008.145F24502B () goliath ! jonkmans ! com
[Download RAW message or body]


[***] Results from Oinkmaster started Fri Oct 31 16:00:08 2008 [***]

[+++]          Added rules:          [+++]

 2008734 - ET MALWARE Suspicious User-Agent Detected (WINS_HTTP_SEND Program/1.0) \
(emerging-malware.rules)


[+++]      Added non-rule lines:     [+++]

     -> Added to emerging-sid-msg.map (1):
        2008734 || ET MALWARE Suspicious User-Agent Detected (WINS_HTTP_SEND \
Program/1.0)

     -> Added to emerging-sid-msg.map.txt (1):
        2008734 || ET MALWARE Suspicious User-Agent Detected (WINS_HTTP_SEND \
Program/1.0)

[---]     Removed non-rule lines:    [---]

     -> Removed from emerging-sid-msg.map (4):
        2500058 || ET COMPROMISED Known Compromised or Hostile Host Traffic (59) || \
                url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts
        2500059 || ET COMPROMISED Known Compromised or Hostile Host Traffic (60) || \
                url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts
        2510058 || ET COMPROMISED Known Compromised or Hostile Host Traffic - \
                BLOCKING (59) || \
                url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts
        2510059 || ET COMPROMISED Known Compromised or Hostile Host Traffic - \
BLOCKING (60) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts

     -> Removed from emerging-sid-msg.map.txt (4):
        2500058 || ET COMPROMISED Known Compromised or Hostile Host Traffic (59) || \
                url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts
        2500059 || ET COMPROMISED Known Compromised or Hostile Host Traffic (60) || \
                url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts
        2510058 || ET COMPROMISED Known Compromised or Hostile Host Traffic - \
                BLOCKING (59) || \
                url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts
        2510059 || ET COMPROMISED Known Compromised or Hostile Host Traffic - \
BLOCKING (60) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts


[prev in list] [next in list] [prev in thread] [next in thread]