We have just added a rule for the Bagle.Q worm derived from data at the following link:

http://www.auscert.org.au/render.html?it=3957

The rule should be present in your next update.
A full rule-base compile is under way.

Thanks!
_M


This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html

Reply via email to