[Emerging-updates] Live Commit Output

emerging@emergingthreats.net emerging at emergingthreats.net
Wed Mar 5 12:58:58 EST 2008


[***] Results from Oinkmaster started Wed Mar  5 12:58:58 2008 [***]

[+++]          Added rules:          [+++]

 2007917 - ET TROJAN Dropper-497 (Yumato) Initial Checkin (bleeding-virus.rules)
 2007918 - ET TROJAN Dropper-497 (Yumato) System Stats Report (bleeding-virus.rules)
 2007919 - ET TROJAN Dropper-497 Yumato Reply from server (bleeding-virus.rules)
 2007920 - ET TROJAN Dropper-497 (Yumato) Status Reply from server (bleeding-virus.rules)


[+++]      Added non-rule lines:     [+++]

     -> Added to bleeding-sid-msg.map (4):
        2007917 || ET TROJAN Dropper-497 (Yumato) Initial Checkin || url,doc.emergingthreats.net/bin/view/Main/TrojanDropper497
        2007918 || ET TROJAN Dropper-497 (Yumato) System Stats Report || url,doc.emergingthreats.net/bin/view/Main/TrojanDropper497
        2007919 || ET TROJAN Dropper-497 Yumato Reply from server || url,doc.emergingthreats.net/bin/view/Main/TrojanDropper497
        2007920 || ET TROJAN Dropper-497 (Yumato) Status Reply from server || url,doc.emergingthreats.net/bin/view/Main/TrojanDropper497

     -> Added to bleeding-sid-msg.map.txt (4):
        2007917 || ET TROJAN Dropper-497 (Yumato) Initial Checkin || url,doc.emergingthreats.net/bin/view/Main/TrojanDropper497
        2007918 || ET TROJAN Dropper-497 (Yumato) System Stats Report || url,doc.emergingthreats.net/bin/view/Main/TrojanDropper497
        2007919 || ET TROJAN Dropper-497 Yumato Reply from server || url,doc.emergingthreats.net/bin/view/Main/TrojanDropper497
        2007920 || ET TROJAN Dropper-497 (Yumato) Status Reply from server || url,doc.emergingthreats.net/bin/view/Main/TrojanDropper497

     -> Added to bleeding-virus.rules (1):
        #discovered by victor julien, sigs by matt jonkman, interesting one. Uses an html-like tag language on 8181



More information about the Emerging-updates mailing list