[Emerging-updates] Live Commit Output

emerging@emergingthreats.net emerging at emergingthreats.net
Fri Jun 4 14:48:29 EDT 2010


[***] Results from Oinkmaster started Fri Jun  4 14:48:29 2010 [***]

[///]     Modified active rules:     [///]

 2010859 - ET TROJAN Gh0st Trojan CnC (emerging-virus.rules)
 2010860 - ET TROJAN Gh0st Trojan CnC Response (emerging-virus.rules)


[---]         Removed rules:         [---]

 2008604 - ET TROJAN Gamethief/PSW.Magania Checkin (emerging-virus.rules)
 2009109 - ET TROJAN AntiAV Command and Control Channel (Gh0st) (emerging-virus.rules)
 2009110 - ET TROJAN AntiAV Command and Control Channel Response (Gh0st) (emerging-virus.rules)


[+++]      Added non-rule lines:     [+++]

     -> Added to emerging-sid-msg.map (2):
        2010859 || ET TROJAN Gh0st Trojan CnC || url,doc.emergingthreats.net/2010859
        2010860 || ET TROJAN Gh0st Trojan CnC Response || url,doc.emergingthreats.net/2010860

     -> Added to emerging-sid-msg.map.txt (2):
        2010859 || ET TROJAN Gh0st Trojan CnC || url,doc.emergingthreats.net/2010859
        2010860 || ET TROJAN Gh0st Trojan CnC Response || url,doc.emergingthreats.net/2010860

     -> Added to emerging-virus.rules (1):
        #also re 53c26839720c9b3e9c6ed9f0d288d288

[---]     Removed non-rule lines:    [---]

     -> Removed from emerging-sid-msg.map (5):
        2008604 || ET TROJAN Gamethief/PSW.Magania Checkin || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Gamethief || url,doc.emergingthreats.net/2008604
        2009109 || ET TROJAN AntiAV Command and Control Channel (Gh0st) || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_AntiAV || url,doc.emergingthreats.net/2009109
        2009110 || ET TROJAN AntiAV Command and Control Channel Response (Gh0st) || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_AntiAV || url,doc.emergingthreats.net/2009110
        2010859 || ET TROJAN Buzus Trojan Proxy Attempt || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Buzus || url,doc.emergingthreats.net/2010859
        2010860 || ET TROJAN Buzus Proxy Server Response || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Buzus || url,doc.emergingthreats.net/2010860

     -> Removed from emerging-sid-msg.map.txt (5):
        2008604 || ET TROJAN Gamethief/PSW.Magania Checkin || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Gamethief || url,doc.emergingthreats.net/2008604
        2009109 || ET TROJAN AntiAV Command and Control Channel (Gh0st) || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_AntiAV || url,doc.emergingthreats.net/2009109
        2009110 || ET TROJAN AntiAV Command and Control Channel Response (Gh0st) || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_AntiAV || url,doc.emergingthreats.net/2009110
        2010859 || ET TROJAN Buzus Trojan Proxy Attempt || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Buzus || url,doc.emergingthreats.net/2010859
        2010860 || ET TROJAN Buzus Proxy Server Response || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Buzus || url,doc.emergingthreats.net/2010860

     -> Removed from emerging-virus.rules (1):
        #by Matt Jonkman, re 53c26839720c9b3e9c6ed9f0d288d288



More information about the Emerging-updates mailing list