Snort mailing list archives
Re: Fizzer Worm Signature
From: "Hudak, Tyler" <Tyler.Hudak () roadway com>
Date: Tue, 13 May 2003 13:30:25 -0400
Symantec has some Snort sigs up on their web site at http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.fizzer@mm.h tml, but I have not been able to verify them. You'll need to clean them up a little bit (put each rule on one line, etc), but from glancing at them it looks like they should work. Tyler
Current thread:
- Fizzer Worm Signature Ty Bodell (May 12)
- Re: Fizzer Worm Signature Michael Bell (May 13)
- <Possible follow-ups>
- Re: Fizzer Worm Signature Hudak, Tyler (May 13)