Correct me if I am wrong however this looks to be another alias for the blackworm. There was a custom signature provided under the blackworm thread:
In the meantime you can use the following custom signature to catch WORM_GREW.A also known as W32.Blackmal.E@mm, W32/Kapser.A@mm, W32/MyWife, Win32/Blackmal.F:
Service Port: 25
Regex String :
I'm new to creating rules. Can you give me the steps needed to create this rule using the IDM Gui interface to a 4255 running 5.0? Things like what engine to use and where to put the Regex string.
Configuration | Signature Definition | Signature Configuration
Click on the "Add" button.
-> New popup with the signature parameters
Select String TCP as an engine
->New parameters appear
Configure "Regex String" and "Service Ports" as mentionned previously.