Snort mailing list archives

Re: Fizzer Worm Signature

From: "Hudak, Tyler" <Tyler.Hudak () roadway com>
Date: Tue, 13 May 2003 13:30:25 -0400

Symantec has some Snort sigs up on their web site at
http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.fizzer@mm.h
tml, but I have not been able to verify them.  You'll need to clean them up
a little bit (put each rule on one line, etc), but from glancing at them it
looks like they should work.

Tyler

Current thread:

Fizzer Worm Signature Ty Bodell (May 12)
- Re: Fizzer Worm Signature Michael Bell (May 13)
- <Possible follow-ups>
- Re: Fizzer Worm Signature Hudak, Tyler (May 13)