Hello Alexander,

Saturday, October 20, 2007, 6:17:32 AM, you wrote:

> Yes, here too.

> Most medical. Passed even Ironport boxes :-/
> I'll submit some samples.

This can happen when a new pre-tested campaign is launched using new
bots. I have a theory that this is one reason the blackhats have been
busy building their new bot nets to such a large size.

We are working on ways to combat this kind of storm with the new SNF
engine.

In the mean time, be sure your rulebase files are as up to date as
possible.

_M

-- 
Pete McNeil
Chief Scientist,
Arm Research Labs, LLC.


#############################################################
This message is sent to you because you are subscribed to
  the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to  <[EMAIL PROTECTED]>

Reply via email to