[Dshield] LoveSan worm - I need a copy of it.

John D. lists at webcrunchers.com
Thu Aug 14 19:28:31 GMT 2003


>Hi John, 
>		I'm member of the snort list too, i saw some posts talking
>about the existing RPC DCOM rule that sould work to detect the worm. If you
>prefer to get latest sigs, then you can get them on
>http://www.algonet.se/~nitzer/oinkmaster/

Excellent.  Thanx a lot...  although it might be a bit late,  I'm sure this
would be of really good use.

John





More information about the list mailing list