TMS zl Module IPS/IDS Signature Reference Guide RLX.10.2.2.94

ProCurve TMS zl Module IPS/IDS Signature
Reference Guide Version RLX.10.2.2.94
636
Signature ID: 29133
Worm MyFip
Threat Level: Warning
Signature Description: A Worm is a malicious program that spreads itself without any user intervention. Worms are
self-replicating. Worms spread without attaching to or infecting other programs and files. A Worm can spread across
computer networks via security holes on vulnerable machines connected to the network. Myfip is a network-aware
worm that steals information from a compromised computer and lowers security settings. This signature for 34330 port,
this event generates log when the packet contains pdf|00| within 256, after first pattern.
Signature ID: 29134
Worm MyFip
Threat Level: Warning
Signature Description: A Worm is a malicious program that spreads itself without any user intervention. Worms are
self-replicating. Worms spread without attaching to or infecting other programs and files. A Worm can spread across
computer networks via security holes on vulnerable machines connected to the network. Myfip is a network-aware
worm that steals information from a compromised computer and lowers security settings. This signature for 34330 port,
this event generates log when the packet contains doc|00| within 256, after first pattern.
Signature ID: 29135
Worm MyFip
Threat Level: Warning
Signature Description: A Worm is a malicious program that spreads itself without any user intervention. Worms are
self-replicating. Worms spread without attaching to or infecting other programs and files. A Worm can spread across
computer networks via security holes on vulnerable machines connected to the network. Myfip is a network-aware
worm that steals information from a compromised computer and lowers security settings. This event generate log when
the packet contains dwg|00| within 256, after first pattern.
Signature ID: 29136
Worm MyFip
Threat Level: Warning
Signature Description: A Worm is a malicious program that spreads itself without any user intervention. Worms are
self-replicating. Worms spread without attaching to or infecting other programs and files. A Worm can spread across
computer networks via security holes on vulnerable machines connected to the network. Myfip is a network-aware
worm that steals information from a compromised computer and lowers security settings. This signature for 34330 port,
this event generates log when the packet contains sch|00| within 256, after first pattern.
Signature ID: 29137
Worm MyFip
Threat Level: Warning
Signature Description: A Worm is a malicious program that spreads itself without any user intervention. Worms are
self-replicating. Worms spread without attaching to or infecting other programs and files. A Worm can spread across
computer networks via security holes on vulnerable machines connected to the network. Myfip is a network-aware
worm that steals information from a compromised computer and lowers security settings. This event generates log
when the packet contains pcb|00| within 256, after first pattern.