RE: W32/Allim worm

["Esler, Joel - Contractor" <joel.esler () rcert-s army mil>]

Keep your eye on bleedingsnort.com, as most new viruses have rules
written for them and posted there.

J

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Biswas,
Proneet
Sent: Wednesday, April 27, 2005 3:00 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] W32/Allim worm


Hi All,
  We were trying to look for a signature for blocking the worm Allim. We
know it goes out on the AIM ports but are not sure if there are any
exact content match available.

Thanks


----------------------------------------------
To have known the best, and to have known it for the best, is success in
life. 




-------------------------------------------------------
SF.Net email is sponsored by: Tell us your software development plans!
Take this survey and enter to win a one-year sub to SourceForge.net Plus
IDC's 2005 look-ahead and a copy of this survey Click here to start!
http://www.idcswdc.com/cgi-bin/survey?id5hix
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=ort-users


-------------------------------------------------------
SF.Net email is sponsored by: Tell us your software development plans!
Take this survey and enter to win a one-year sub to SourceForge.net
Plus IDC's 2005 look-ahead and a copy of this survey
Click here to start!  http://www.idcswdc.com/cgi-bin/survey?id5hix
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users