IPS Critical Alert - Botnet

[nix-patheon]

Hi all,

We received a number of alerts from our IPS last night with high severity, signature name "Rustock Botnet". It may be just a false positive, but I would appreciate some assistance if anyone could shed further light on the alert (attached).

Thanks.

[Anim Saxena]

Hi Nix-patheon,

I am pasting a link which might give you insight about "Rustock Botnet"

http://en.wikipedia.org/wiki/Rustock_botnet

Regards and Thanx.

Anim Saxena

*Rate helpful posts*

[contrak]

Hi,

Here is some additonal technical information about Rustock botnet along with links to vendor responses.

http://tools.cisco.com/security/center/viewAlert.x?alertId=18294