Hello Sniffer Folks, Regarding rule 963461 - the rule was coded for a short sequence of (3x). It was misinterpreted and/or miscopied as part of obfuscation.
The rule was coded at 20060417.1929 E and removed at approximately 20060418.1000 E. There was one additional rule pulled (963533) which was coded for a binary segment of an image file. No hits have been reported on the second rule at this time. Best, _M Pete McNeil (Madscientist) President, MicroNeil Research Corporation Chief SortMonster (www.sortmonster.com) Chief Scientist (www.armresearch.com) This E-Mail came from the Message Sniffer mailing list. For information and (un)subscription instructions go to http://www.sortmonster.com/MessageSniffer/Help/Help.html
