The Sourcefire VRT has added multiple rules to detect the use of Spyware and potentially unwanted technology on a network.

Details:
As a result of continuing research in the field of Spyware and potentially unwanted technology, the Sourcefire VRT has added multiple rules to the Spyware and Backdoor rule sets.

Each rule is also accompanied by detailed documentation for each Trojan, Spyware and potentially unwanted software to assist in determining the likelihood of infection and has relevant links to information regarding their removal.

This SEU also contains an improved version of the detection engine with enhanced performance which includes the following bug fixes and improvements.

 * Improved fragmentation reassembly processing
 * Improved TCP stream processing performance
 * Improved SMTP command processing
 

Advisory:
A detailed advisory as well as a complete list of modified and deleted rules is available at http://www.snort.org/rules/advisories/vrt-rules-2006-08-22.html.

Download Rules:
These rules will be available to subscribers only until Sunday, August 27, 2006. Subscribers can download the rules at http://www.snort.org/pub-bin/downloads.cgi.

If you would like to purchase a subscription, please visit http://www.snort.org/rules/why_subscribe.html or contact Jay Anderson at 703.462.2636 or .