RE: Re: pif worm

["James Friesen" <lucretia () telusplanet net>]

Not in my virus.rules file...

Perhaps there are multiple rulesets floating around...

> :> -----Original Message-----
> :> > These dumb email messages with PIF or SCR in the title are 
> :> causing a LOT of false alarms here.
> :> 
> :> These rules are disabled by default on purpose.
> :> 
> :> CUT-N-PASTE from virus.rules
> :> 
> :> # NOTE: These rules are NOT being actively maintained.  If you would
> :> like
> :> # to update these rules, e-mail snort-sigs () lists sourceforge net
> :> 

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users