[Emerging-updates] Live Commit Output

emerging@emergingthreats.net emerging at emergingthreats.net
Sat Mar 8 19:42:18 EST 2008


[***] Results from Oinkmaster started Sat Mar  8 19:42:18 2008 [***]

[---]         Removed rules:         [---]

 2007941 - ET MALWARE Invalid HTTP GET Request - Often Malware Related (bleeding-malware.rules)


[---]     Removed non-rule lines:    [---]

     -> Removed from bleeding-malware.rules (3):
        # Seeing several bits of malware that are creating their http get's
        #  incorrectly. They're adding an http://domain.com/url to the GET string,
        #  which should be just the uri. This will catch those

     -> Removed from bleeding-sid-msg.map (1):
        2007941 || ET MALWARE Invalid HTTP GET Request - Often Malware Related || url,doc.emergingthreats.net/2007941

     -> Removed from bleeding-sid-msg.map.txt (1):
        2007941 || ET MALWARE Invalid HTTP GET Request - Often Malware Related || url,doc.emergingthreats.net/2007941



More information about the Emerging-updates mailing list