http://dlsvr01.asus.com/pub/ASUS/wireless/WL-600g/GPL_WL600g_1028A.zip

[bcm963xx.git] / targets / fs.src / etc / l7-protocols / malware / code_red.pat

diff --git a/targets/fs.src/etc/l7-protocols/malware/code_red.pat b/targets/fs.src/etc/l7-protocols/malware/code_red.pat
new file mode 100755 (executable)
index 0000000..52005fe
--- /dev/null
+++ b/targets/fs.src/etc/l7-protocols/malware/code_red.pat
@@ -0,0 +1,9 @@
+# Code Red - a worm that attacks Microsoft IIS web servers
+# Pattern quality: ok fast
+
+# To get or provide more information about this worm and/or pattern:
+# http://www.protocolinfo.org/wiki/CodeRed
+# http://lists.sourceforge.net/lists/listinfo/l7-filter-developers
+
+code_red
+/default\.ida\?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a