[Emerging-Sigs] Emerging Threats Daily Signature Changes

Fri Mar 21 16:00:11 EST 2008

[***] Results from Oinkmaster started Fri Mar 21 17:00:11 2008 [***]

[+++]          Added rules:          [+++]

 2008037 - ET POLICY Gteko User-Agent Detected - Dell Remote Access (bleeding-policy.rules)
 2008038 - ET MALWARE Suspicious User Agent (Mozilla/4.0 (compatible\; ICS)) (bleeding-malware.rules)


[///]     Modified active rules:     [///]

 2007695 - ET POLICY Windows 98 User-Agent Detected - Possible Malware or Non-Updated System (bleeding-policy.rules)


[+++]      Added non-rule lines:     [+++]

     -> Added to bleeding-policy.rules (1):
        #by Jack Pepper

     -> Added to bleeding-sid-msg.map (2):
        2008037 || ET POLICY Gteko User-Agent Detected - Dell Remote Access || url,doc.emergingthreats.net/bin/view/Main/Windows98UA
        2008038 || ET MALWARE Suspicious User Agent (Mozilla/4.0 (compatible\; ICS))

     -> Added to bleeding-sid-msg.map.txt (2):
        2008037 || ET POLICY Gteko User-Agent Detected - Dell Remote Access || url,doc.emergingthreats.net/bin/view/Main/Windows98UA
        2008038 || ET MALWARE Suspicious User Agent (Mozilla/4.0 (compatible\; ICS))