Hi,
Kalo masuk ke symantec, bagian yang menerangkan suatu virus, kadang aku
lihat ada signature untuk symantect ManHunt seperti di bawah ini:
***start file
alert tcp any any -> any 25 (msg:"BugBear B SMTP Worm Propagation";
content:"CwEGAAAgAQAAEOAGACABC
On Mon, Jun 09, 2003 at 11:54:30AM +0700, Dapid Candra wrote:
>alert tcp any any -> any 1080 (msg: "BugBear B Backdoor Attack";
>content: "|3b|y"; offset: 20; depth: 2; dsize:>21; )
>alert tcp any any -> any 1080 (msg: "BugBear B Backdoor Attack";
>content: "|3b|t"; offset: 20; depth: 2; dsize:>
2 matches
Mail list logo