.N W32_HLLW_Fizzer_Worm	#Policy Name
.L 2 	#Policy structure
.D This policy detects the creation of files associated with the W32.HLLW.Fizzer@mm Worm	#Policy Description
.V 1052800112 	#Policy revision number
.Z 1195 	#Policy ID
.Z 1195 	#Policy ID
.R W32_HLLW_Fizzer_Worm Activity	#Rule Definition
..D This rule detects the creation of files associated with the W32.HLLW.Fizzer@mm Worm.	#Rule Description
..Z 1194 	#Rule ID
..V 50 	#Rule Value
..S 	#Select Clause(s)
...G System Message 	#System Message
....T *Event file:*iservc.dat*File Change in last* 	#Regular text
....T *Event file:*iservc.dll*File Change in last* 	#Regular text
....T *Event file:*iservc.exe*File Change in last* 	#Regular text
....T *Event file:*ProgOp.exe*File Change in last* 	#Regular text
....C 1 	#Case sensitivity
....Z 1192 	#ID of the clause
..A  	#Action Clause(s)
...E Record to Event Viewer 	#Record Event
....Z 1193 	#ID of the clause