[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-sigs
Subject:    [Snort-sigs] Pentagone Virus/Worm/Bleah
From:       Mark Canter <marcus () doutlets ! com>
Date:       2001-12-04 20:51:37
[Download RAW message or body]


For anyone that wants to count those worm statistics (simple, crude,
lacking reference points, but gets the job done)...

alert tcp any any -> any 25 (msg:"Virus - Possible Pentagone virus";
content:"name="; content:"Gone.scr" nocase; classtype:misc-activity;
rev:1;)



_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs

[prev in list] [next in list] [prev in thread] [next in thread]