RE: Klez Incoming

["Jim O'Donald" <jodonald () cfunet net>]

I see about that many Klez alerts in snort, but I also see them in my
Trend Micro Antivirus for Exchange.

Jim

-----Original Message-----
From: Jacob Redding [mailto:Jacob () wiredgeek com] 
Sent: Wednesday, November 13, 2002 2:18 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Klez Incoming


  Everyday I am receiving about 2-3 "VIRUS Klez Incoming" alerts from
snort, but our virus protection program is not picking it up. I believe
this is a false positive as our virus defs are up to date. Before I rule
this as a false positive or start digging through peoples mailboxes
(privacy policy, blah blah), has any else had this experience??


-Jacob




-------------------------------------------------------
This sf.net email is sponsored by: Are you worried about 
your web server security? Click here for a FREE Thawte 
Apache SSL Guide and answer your Apache SSL security 
needs: http://www.gothawte.com/rd523.html
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This sf.net email is sponsored by: Are you worried about
your web server security? Click here for a FREE Thawte
Apache SSL Guide and answer your Apache SSL security
needs: http://www.gothawte.com/rd523.html
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users