cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
415
Views
5
Helpful
2
Replies

W32/Sober.c@MM virus

rttsui
Level 1
Level 1

Hi, do we have a NIDS signature for this virus?

Signature 3110 seems to cover some of the file types

carried by this virus. But it doesn't seem to include the following ones - .com, .bat, .cmd, .exe ?

Thanks.

2 Replies 2

derwalke
Level 1
Level 1

We do not have a specific signature for this virus/worm variant. However, in our next signature release we will be modifying signature 3110 to include the extensions you mention as well as possibly tuning some of its other parameters to make it more useful in worm detection.

That would be great. Thank you.