Ruleset Update Summary - 2026/09/07 - v11279

Ruleset Updates
1

Summary:

0 new OPEN, 0 new PRO (0 + 0)

Modified inactive rules:

  • 2000915 - ET ADWARE_PUP WhenUClick.com Weather App Checkin (2) (adware_pup.rules)
  • 2000916 - ET ADWARE_PUP WhenUClick.com WhenUSave App Checkin (adware_pup.rules)
  • 2000917 - ET ADWARE_PUP WhenUClick.com WhenUSave Data Retrieval (offersdata) (adware_pup.rules)
  • 2000918 - ET ADWARE_PUP WhenUClick.com Desktop Bar Install (adware_pup.rules)
  • 2000919 - ET ADWARE_PUP WhenUClick.com WhenUSave Data Retrieval (Searchdb) (adware_pup.rules)
  • 2000920 - ET ADWARE_PUP Hotbar Install (1) (adware_pup.rules)
  • 2000921 - ET ADWARE_PUP Hotbar Install (2) (adware_pup.rules)
  • 2000922 - ET ADWARE_PUP Hotbar Install (3) (adware_pup.rules)
  • 2000923 - ET ADWARE_PUP Hotbar Agent Reporting Information (adware_pup.rules)
  • 2000924 - ET ADWARE_PUP Hotbar Agent Upgrading (adware_pup.rules)
  • 2000925 - ET ADWARE_PUP Hotbar Agent Partner Checkin (adware_pup.rules)
  • 2000927 - ET ADWARE_PUP ISearchTech.com XXXPornToolbar Reporting (adware_pup.rules)
  • 2000928 - ET ADWARE_PUP ISearchTech.com XXXPornToolbar Activity (1) (adware_pup.rules)
  • 2000929 - ET ADWARE_PUP Hotbar Agent Activity (adware_pup.rules)
  • 2000936 - ET ADWARE_PUP FlashTrack Agent Retrieving New App Code (adware_pup.rules)
  • 2001016 - ET ADWARE_PUP SideStep Bar Install (adware_pup.rules)
  • 2001017 - ET ADWARE_PUP SideStep Bar Reporting Data (adware_pup.rules)
  • 2001032 - ET ADWARE_PUP Casino on Net Ping Hit (adware_pup.rules)
  • 2001033 - ET ADWARE_PUP Casino on Net Data Download (adware_pup.rules)
  • 2001038 - ET ADWARE_PUP Ebates Install (adware_pup.rules)
  • 2001041 - ET ADWARE_PUP Casino on Net Install (adware_pup.rules)
  • 2001050 - ET ADWARE_PUP CometSystems Spyware (adware_pup.rules)
  • 2001198 - ET ADWARE_PUP Twaintec Download Attempt (adware_pup.rules)
  • 2001199 - ET ADWARE_PUP Twaintec Ad Retrieval (adware_pup.rules)
  • 2001216 - ET ADWARE_PUP Twaintec Reporting Data (adware_pup.rules)
  • 2001221 - ET ADWARE_PUP F1Organizer Config Download (adware_pup.rules)
  • 2001224 - ET ADWARE_PUP Regnow.com Gamehouse.com Access (adware_pup.rules)
  • 2001228 - ET ADWARE_PUP Advertising.com Data Post (villains) (adware_pup.rules)
  • 2001230 - ET ADWARE_PUP Advertising.com Data Post (cakedeal) (adware_pup.rules)
  • 2001241 - ET CHAT MSN file transfer request (chat.rules)
  • 2001242 - ET CHAT MSN file transfer accept (chat.rules)
  • 2001243 - ET CHAT MSN file transfer reject (chat.rules)
  • 2001307 - ET ADWARE_PUP Wild Tangent Agent Installation (adware_pup.rules)
  • 2001308 - ET ADWARE_PUP Internet Optomizer Reporting Data (adware_pup.rules)
  • 2001309 - ET ADWARE_PUP Wild Tangent Agent Checking In (adware_pup.rules)
  • 2001310 - ET ADWARE_PUP Wild Tangent Agent Traffic (adware_pup.rules)
  • 2001311 - ET ADWARE_PUP Rdxrp.com Traffic (adware_pup.rules)
  • 2001313 - ET ADWARE_PUP Traffic Syndicate Add/Remove (adware_pup.rules)
  • 2001314 - ET ADWARE_PUP Wild Tangent Agent (adware_pup.rules)
  • 2001315 - ET ADWARE_PUP Traffic Syndicate Agent Updating (1) (adware_pup.rules)
  • 2001316 - ET ADWARE_PUP Traffic Syndicate Agent Updating (2) (adware_pup.rules)
  • 2001321 - ET ADWARE_PUP Speedera Agent (Specific) (adware_pup.rules)
  • 2001322 - ET ADWARE_PUP Wild Tangent New Install (adware_pup.rules)
  • 2001340 - ET ADWARE_PUP LocalNRD Spyware Checkin (adware_pup.rules)
  • 2001341 - ET ADWARE_PUP OfferOptimizer.com Spyware (adware_pup.rules)
  • 2001342 - ET WEB_SERVER IIS ASP.net Auth Bypass / Canonicalization (web_server.rules)
  • 2001343 - ET WEB_SERVER IIS ASP.net Auth Bypass / Canonicalization % 5 C (web_server.rules)
  • 2001345 - ET ADWARE_PUP Bonziportal Traffic (adware_pup.rules)
  • 2001359 - ET ADWARE_PUP MarketScore.com Spyware Access (adware_pup.rules)
  • 2001365 - ET WEB_SERVER Alternate Data Stream source view attempt (web_server.rules)
  • 2001396 - ET ADWARE_PUP Internet Optimizer Spyware Install (adware_pup.rules)
  • 2001398 - ET ADWARE_PUP Bfast.com Spyware (adware_pup.rules)
  • 2001416 - ET ADWARE_PUP E2give Related Reporting Install (adware_pup.rules)
  • 2001423 - ET ADWARE_PUP E2give Related Reporting (adware_pup.rules)
  • 2001441 - ET ADWARE_PUP Abox Install Report (adware_pup.rules)
  • 2001442 - ET ADWARE_PUP Statblaster.MemoryWatcher Download (adware_pup.rules)
  • 2001444 - ET ADWARE_PUP Overpro Spyware Bundle Install (adware_pup.rules)
  • 2001450 - ET ADWARE_PUP Wintools Download/Configure (adware_pup.rules)
  • 2001451 - ET ADWARE_PUP Bundleware Spyware Download (adware_pup.rules)
  • 2001458 - ET ADWARE_PUP Bundleware Spyware cab Download (adware_pup.rules)
  • 2001459 - ET ADWARE_PUP Overpro Spyware Games (adware_pup.rules)
  • 2001461 - ET ADWARE_PUP Xpire.info Multiple Spyware Installs (1) (adware_pup.rules)
  • 2001462 - ET ADWARE_PUP Xpire.info Multiple Spyware Installs Occuring (adware_pup.rules)
  • 2001466 - ET ADWARE_PUP Xpire.info Multiple Spyware Installs (4) (adware_pup.rules)
  • 2001467 - ET ADWARE_PUP Xpire.info Multiple Spyware Installs (5) (adware_pup.rules)
  • 2001468 - ET ADWARE_PUP Xpire.info Multiple Spyware Installs CHM Exploit (adware_pup.rules)
  • 2001469 - ET ADWARE_PUP Xpire.info Multiple Spyware Installs (6) (adware_pup.rules)
  • 2001470 - ET ADWARE_PUP Xpire.info Multiple Spyware Installs (7) (adware_pup.rules)
  • 2001471 - ET ADWARE_PUP Xpire.info Spyware Exploit (adware_pup.rules)
  • 2001481 - ET ADWARE_PUP MediaTickets Spyware Install (adware_pup.rules)
  • 2001482 - ET ADWARE_PUP thebestsoft4u.com Spyware Install (1) (adware_pup.rules)
  • 2001484 - ET ADWARE_PUP Searchmeup Spyware Install (d.exe) (adware_pup.rules)
  • 2001485 - ET ADWARE_PUP thebestsoft4u.com Spyware Install (2) (adware_pup.rules)
  • 2001490 - ET ADWARE_PUP ICQ-Update.biz Reporting Install (adware_pup.rules)
  • 2001495 - ET ADWARE_PUP Outerinfo.com Spyware Install (adware_pup.rules)
  • 2001505 - ET ADWARE_PUP Smartpops.com Spyware Install rh.exe (adware_pup.rules)
  • 2001510 - ET ADWARE_PUP SurfAssistant.com Spyware Install (adware_pup.rules)
  • 2001513 - ET ADWARE_PUP Smartpops.com Spyware Update (adware_pup.rules)
  • 2001514 - ET ADWARE_PUP SurfAssistant.com Spyware Reporting (adware_pup.rules)
  • 2001516 - ET ADWARE_PUP Smartpops.com Spyware Install (adware_pup.rules)
  • 2001517 - ET ADWARE_PUP Websearch.com Outbound Dialer Retrieval (adware_pup.rules)
  • 2001521 - ET ADWARE_PUP Spywaremover Activity (adware_pup.rules)
  • 2001525 - ET ADWARE_PUP Virtumonde Spyware Code Download mmdom.exe (adware_pup.rules)
  • 2001530 - ET ADWARE_PUP ak-networks.com Spyware Code Download (adware_pup.rules)
  • 2001536 - ET ADWARE_PUP Spyspotter.com Install (adware_pup.rules)
  • 2001538 - ET ADWARE_PUP Oenji.com Install (adware_pup.rules)
  • 2001540 - ET ADWARE_PUP Searchmiracle.com Spyware Install (v3cab) (adware_pup.rules)
  • 2001571 - ET ADWARE_PUP Spyware Stormer/Error Guard Activity (adware_pup.rules)
  • 2001587 - ET ADWARE_PUP MarketScore.com Spyware Upgrading (adware_pup.rules)
  • 2001588 - ET ADWARE_PUP MarketScore.com Spyware Activity (1) (adware_pup.rules)
  • 2001589 - ET ADWARE_PUP MarketScore.com Spyware Activity (2) (adware_pup.rules)
  • 2001641 - ET ADWARE_PUP Microgaming.com Spyware Installation (dlhelper) (adware_pup.rules)
  • 2001643 - ET ADWARE_PUP Microgaming.com Spyware Installation (2) (adware_pup.rules)
  • 2001644 - ET ADWARE_PUP Microgaming.com Spyware Reporting Installation (adware_pup.rules)
  • 2001645 - ET ADWARE_PUP Microgaming.com Spyware Casino App Install (adware_pup.rules)
  • 2001646 - ET ADWARE_PUP Toprebates.com Install (1) (adware_pup.rules)
  • 2001647 - ET ADWARE_PUP Toprebates.com Install (2) (adware_pup.rules)
  • 2001648 - ET ADWARE_PUP Toprebates.com User Confirming Membership (adware_pup.rules)
  • 2001655 - ET ADWARE_PUP Comet Systems Spyware Traffic (context.xml) (adware_pup.rules)
  • 2001657 - ET ADWARE_PUP GlobalPhon.com Dialer Download (adware_pup.rules)
  • 2001682 - ET CHAT MSN IM Poll via HTTP (chat.rules)
  • 2001696 - ET ADWARE_PUP Search Relevancy Spyware (adware_pup.rules)
  • 2001697 - ET ADWARE_PUP ISearchTech Toolbar Data Submission (adware_pup.rules)
  • 2001700 - ET ADWARE_PUP Windupdates.com Spyware Install (adware_pup.rules)
  • 2001705 - ET ADWARE_PUP Flingstone Spyware Install (sportsinteraction) (adware_pup.rules)
  • 2001708 - ET ADWARE_PUP Shop at Home Select Spyware Heartbeat (adware_pup.rules)
  • 2001710 - ET ADWARE_PUP Flingstone Spyware Install (cxtpls) (adware_pup.rules)
  • 2001729 - ET ADWARE_PUP Tibsystems Spyware Install (1) (adware_pup.rules)
  • 2001730 - ET ADWARE_PUP A-d-w-a-r-e.com Activity (popup) (adware_pup.rules)
  • 2001734 - ET ADWARE_PUP Tibsystems Spyware Install (2) (adware_pup.rules)
  • 2001735 - ET ADWARE_PUP A-d-w-a-r-e.com Activity (cmd) (adware_pup.rules)
  • 2001737 - ET ADWARE_PUP ak-networks.com Spyware Code Install (adware_pup.rules)
  • 2001747 - ET ADWARE_PUP My-Stats.com Spyware Checkin (adware_pup.rules)
  • 2001748 - ET ADWARE_PUP Pynix.dll BHO Activity (adware_pup.rules)
  • 2001764 - ET MALWARE Bugbear@MM virus via SMTP (malware.rules)
  • 2001793 - ET ADWARE_PUP Incredisearch.com Spyware Ping (adware_pup.rules)
  • 2001884 - ET ADWARE_PUP DesktopTraffic Toolbar Spyware (adware_pup.rules)
  • 2001885 - ET ADWARE_PUP Begin2Search.com Spyware (adware_pup.rules)
  • 2001895 - ET ADWARE_PUP ToolbarPartner Spyware Spambot Retrieving Target Emails (adware_pup.rules)
  • 2001933 - ET MALWARE PWS Banker Trojan Sending Report of Infection (malware.rules)
  • 2001994 - ET ADWARE_PUP SurfSidekick Activity (ipixel) (adware_pup.rules)
  • 2001997 - ET ADWARE_PUP TargetNetworks.net Spyware Reporting (req) (adware_pup.rules)
  • 2001998 - ET ADWARE_PUP UCMore Spyware Downloading Ads (adware_pup.rules)
  • 2001999 - ET ADWARE_PUP BTGrab.com Spyware Downloading Ads (adware_pup.rules)
  • 2002000 - ET ADWARE_PUP Shopnav Spyware Install (adware_pup.rules)
  • 2002004 - ET ADWARE_PUP Topconverting Spyware Install (adware_pup.rules)
  • 2002008 - ET ADWARE_PUP Wild Tangent Install (adware_pup.rules)
  • 2002009 - ET ADWARE_PUP ESyndicate Spyware Install (esyndicateinst.exe) (adware_pup.rules)
  • 2002010 - ET ADWARE_PUP ESyndicate Spyware Install (sepinst.exe) (adware_pup.rules)
  • 2002012 - ET ADWARE_PUP GrandstreetInteractive.com Install (adware_pup.rules)
  • 2002013 - ET ADWARE_PUP GrandstreetInteractive.com Update (adware_pup.rules)
  • 2002015 - ET ADWARE_PUP Internet Fuel.com Install (adware_pup.rules)
  • 2002016 - ET ADWARE_PUP jmnad1.com Spyware Install (2) (adware_pup.rules)
  • 2002017 - ET ADWARE_PUP Overpro Spyware Install Report (adware_pup.rules)
  • 2002019 - ET ADWARE_PUP jmnad1.com Spyware Install (1) (adware_pup.rules)
  • 2002036 - ET ADWARE_PUP Weird on the Web /180 Solutions Checkin (adware_pup.rules)
  • 2002037 - ET ADWARE_PUP Shop at Home Select Spyware Install (adware_pup.rules)
  • 2002040 - ET ADWARE_PUP Topconverting Spyware Reporting (adware_pup.rules)
  • 2002044 - ET ADWARE_PUP OutBlaze.com Spyware Activity (adware_pup.rules)
  • 2002046 - ET ADWARE_PUP TargetNetworks.net Spyware Reporting (tn) (adware_pup.rules)
  • 2002048 - ET ADWARE_PUP 180solutions Spyware Defs Download (adware_pup.rules)
  • 2002083 - ET ADWARE_PUP Pacimedia Spyware 1 (adware_pup.rules)
  • 2002088 - ET ADWARE_PUP C4tdownload.com Spyware Activity (adware_pup.rules)
  • 2002089 - ET ADWARE_PUP CWS qck.cc Spyware Installer (in.php) (adware_pup.rules)
  • 2002090 - ET ADWARE_PUP IEHelp.net Spyware Installer (adware_pup.rules)
  • 2002091 - ET ADWARE_PUP Searchmiracle.com Spyware Install - silent.exe (adware_pup.rules)
  • 2002095 - ET ADWARE_PUP CWS qck.cc Spyware Installer (web.php) (adware_pup.rules)
  • 2002096 - ET ADWARE_PUP IEHelp.net Spyware checkin (adware_pup.rules)
  • 2002099 - ET ADWARE_PUP 180solutions Spyware config Download (adware_pup.rules)
  • 2002131 - ET WEB_SERVER Oracle Reports XML Information Disclosure (web_server.rules)
  • 2002132 - ET WEB_SERVER Oracle Reports DESFORMAT Information Disclosure (web_server.rules)
  • 2002133 - ET WEB_SERVER Oracle Reports OS Command Injection Attempt (web_server.rules)
  • 2002175 - ET MALWARE Srv.SSA-KeyLogger Checkin Traffic (malware.rules)
  • 2002296 - ET ADWARE_PUP Searchfeed.com Spyware 1 (adware_pup.rules)
  • 2002297 - ET ADWARE_PUP Searchfeed.com Spyware 2 (adware_pup.rules)
  • 2002298 - ET ADWARE_PUP Searchfeed.com Spyware 3 (adware_pup.rules)
  • 2002299 - ET ADWARE_PUP Searchfeed.com Spyware 4 (adware_pup.rules)
  • 2002300 - ET ADWARE_PUP Searchfeed.com Spyware 5 (adware_pup.rules)
  • 2002301 - ET ADWARE_PUP Searchfeed.com Spyware 6 (adware_pup.rules)
  • 2002302 - ET ADWARE_PUP Searchfeed.com Spyware 7 (adware_pup.rules)
  • 2002303 - ET ADWARE_PUP Searchfeed.com Spyware 8 (adware_pup.rules)
  • 2002305 - ET ADWARE_PUP Fun Web Products Smileychooser Spyware (adware_pup.rules)
  • 2002306 - ET ADWARE_PUP Fun Web Products Cursorchooser Spyware (adware_pup.rules)
  • 2002310 - ET ADWARE_PUP Fun Web Products Smileychooser Spyware (adware_pup.rules)
  • 2002317 - ET ADWARE_PUP EZSearch Spyware Reporting Search Strings (adware_pup.rules)
  • 2002318 - ET ADWARE_PUP EZSearch Spyware Reporting Search Category (adware_pup.rules)
  • 2002319 - ET ADWARE_PUP EZSearch Spyware Reporting 2 (adware_pup.rules)
  • 2002320 - ET ADWARE_PUP Transponder Spyware Activity (adware_pup.rules)
  • 2002348 - ET ADWARE_PUP VPP Technologies Spyware (adware_pup.rules)
  • 2002349 - ET ADWARE_PUP Alexa Spyware Reporting URL (adware_pup.rules)
  • 2002350 - ET ADWARE_PUP VPP Technologies Spyware Reporting URL (adware_pup.rules)
  • 2002351 - ET ADWARE_PUP Comet Systems Spyware Update Download (adware_pup.rules)
  • 2002352 - ET ADWARE_PUP Comet Systems Spyware Context Report (adware_pup.rules)
  • 2002354 - ET ADWARE_PUP 180solutions Spyware versionconfig POST (adware_pup.rules)
  • 2002362 - ET WEB_SERVER Barracuda Spam Firewall img.pl Remote Command Execution Attempt (web_server.rules)
  • 2002376 - ET WEB_SERVER IBM Lotus Domino BaseTarget XSS attempt (web_server.rules)
  • 2002377 - ET WEB_SERVER IBM Lotus Domino Src XSS attempt (web_server.rules)
  • 2002667 - ET WEB_SERVER sumthin scan (web_server.rules)
  • 2002708 - ET ADWARE_PUP iframebiz - sploit.anr (adware_pup.rules)
  • 2002709 - ET ADWARE_PUP iframebiz - loaderadv***.jar (adware_pup.rules)
  • 2002721 - ET WEB_SERVER Cisco IOS HTTP set enable password attack (web_server.rules)
  • 2002738 - ET ADWARE_PUP SurfSidekick Activity (rinfo) (adware_pup.rules)
  • 2002770 - ET ADWARE_PUP Corpsespyware.net - msits.exe access (adware_pup.rules)
  • 2002771 - ET ADWARE_PUP Corpsespyware.net - msys.exe access (adware_pup.rules)
  • 2002777 - ET WEB_SERVER Light Weight Calendar ‘date’ Arbitrary Remote Code Execution (web_server.rules)
  • 2002804 - ET ADWARE_PUP Spyaxe Spyware DB Update (adware_pup.rules)
  • 2002816 - ET ADWARE_PUP DelFin Project Spyware (payload) (adware_pup.rules)
  • 2002817 - ET ADWARE_PUP DelFin Project Spyware (setup) (adware_pup.rules)
  • 2002820 - ET ADWARE_PUP Hotbar Agent Subscription POST (adware_pup.rules)
  • 2002821 - ET ADWARE_PUP SideStep Bar Reporting Data (sbstart) (adware_pup.rules)
  • 2002857 - ET MALWARE Win32.VB.aie Reporting User Activity (malware.rules)
  • 2002858 - ET ADWARE_PUP Fun Web Products StationaryChooser Spyware (adware_pup.rules)
  • 2002864 - ET WEB_SERVER osCommerce extras/update.php disclosure (web_server.rules)
  • 2002900 - ET WEB_SERVER CGI AWstats Migrate Command Attempt (web_server.rules)
  • 2002925 - ET INAPPROPRIATE Google Image Search, Safe Mode Off (inappropriate.rules)
  • 2002954 - ET ADWARE_PUP Bravesentry.com Fake Antispyware Download (adware_pup.rules)
  • 2002956 - ET ADWARE_PUP Bestcount.net Spyware Downloading vxgame (adware_pup.rules)
  • 2002957 - ET ADWARE_PUP Bestcount.net Spyware Initial Infection Download (adware_pup.rules)
  • 2002984 - ET ADWARE_PUP SpySherriff Spyware Activity (adware_pup.rules)
  • 2002987 - ET ADWARE_PUP Jupitersatellites.biz Spyware Download (adware_pup.rules)
  • 2002999 - ET ADWARE_PUP /jk/exp.wmf Exploit Code Load Attempt (adware_pup.rules)
  • 2003000 - ET ADWARE_PUP PopupSh.ocx Access Attempt (adware_pup.rules)
  • 2003057 - ET ADWARE_PUP 180solutions Spyware Actionlibs Download (adware_pup.rules)
  • 2003059 - ET ADWARE_PUP 180solutions (Zango) Spyware TB Installer Download (adware_pup.rules)
  • 2003061 - ET ADWARE_PUP 180solutions (Zango) Spyware Event Activity Post (adware_pup.rules)
  • 2003074 - ET ADWARE_PUP Content-loader.com Spyware Install (adware_pup.rules)
  • 2003075 - ET ADWARE_PUP Content-loader.com Spyware Install 2 (adware_pup.rules)
  • 2003076 - ET ADWARE_PUP Content-loader.com (ownusa.info) Spyware Install (adware_pup.rules)
  • 2003083 - ET MALWARE Dialer (malware.rules)
  • 2003084 - ET ADWARE_PUP TROJAN_VB Microjoin (adware_pup.rules)
  • 2003086 - ET WEB_SERVER Barracuda Spam Firewall preview_email.cgi Remote Command Execution (web_server.rules)
  • 2003099 - ET WEB_SERVER Poison Null Byte (web_server.rules)
  • 2003115 - ET MALWARE - Trojan.Proxy.PPAgent.t (updatea) (malware.rules)
  • 2003151 - ET ADWARE_PUP Fun Web Products SmileyCentral IEsp2 Install (adware_pup.rules)
  • 2003153 - ET ADWARE_PUP Bestcount.net Spyware Exploit Download (adware_pup.rules)
  • 2003190 - ET MALWARE Win32.Lager Trojan Reporting Spam (malware.rules)
  • 2003201 - ET ADWARE_PUP Thespyguard.com Spyware Install (adware_pup.rules)
  • 2003219 - ET ADWARE_PUP Alexa Spyware Reporting (adware_pup.rules)
  • 2003240 - ET ADWARE_PUP New.net Spyware updating (adware_pup.rules)
  • 2003241 - ET ADWARE_PUP New.net Spyware Checkin (adware_pup.rules)
  • 2003297 - ET ADWARE_PUP Travel Update Spyware (adware_pup.rules)
  • 2003298 - ET ADWARE_PUP KMIP.net Spyware (adware_pup.rules)
  • 2003307 - ET ADWARE_PUP Comet Systems Spyware Cursor DL (adware_pup.rules)
  • 2003340 - ET ADWARE_PUP Baidu.com Spyware Bar Reporting (adware_pup.rules)
  • 2003348 - ET ADWARE_PUP Gamehouse.com Activity (adware_pup.rules)
  • 2003353 - ET ADWARE_PUP Winferno Registry Fix Spyware Download (adware_pup.rules)
  • 2003354 - ET ADWARE_PUP Yourscreen.com Spyware Download (adware_pup.rules)
  • 2003358 - ET ADWARE_PUP Catchonlife.com Spyware (adware_pup.rules)
  • 2003362 - ET ADWARE_PUP Freeze.com Spyware/Adware (Pulling Ads) (adware_pup.rules)
  • 2003364 - ET ADWARE_PUP Hotbar Agent Adopt/Zango (adware_pup.rules)
  • 2003375 - ET ADWARE_PUP Spy-Not.com Spyware Pulling Fake Sigs (adware_pup.rules)
  • 2003376 - ET ADWARE_PUP Instafinder.com spyware (adware_pup.rules)
  • 2003377 - ET ADWARE_PUP Spy-Not.com Spyware Updating (adware_pup.rules)
  • 2003388 - ET ADWARE_PUP Hotbar Keywords Download (adware_pup.rules)
  • 2003391 - ET ADWARE_PUP SurfAccuracy.com Spyware Pulling Ads (adware_pup.rules)
  • 2003404 - ET ADWARE_PUP WhenUClick.com WhenUSave Data Retrieval (DataChunksGZ) (adware_pup.rules)
  • 2003414 - ET ADWARE_PUP Epilot.com Spyware Reporting (adware_pup.rules)
  • 2003417 - ET ADWARE_PUP CNSMIN (3721.com) Spyware Activity (adware_pup.rules)
  • 2003418 - ET ADWARE_PUP CNSMIN (3721.com) Spyware Activity 2 (adware_pup.rules)
  • 2003419 - ET ADWARE_PUP CNSMIN (3721.com) Spyware Activity 3 (adware_pup.rules)
  • 2003438 - ET ADWARE_PUP Abcsearch.com Spyware Reporting (adware_pup.rules)
  • 2003442 - ET ADWARE_PUP Webbuying.net Spyware Installing (adware_pup.rules)
  • 2003444 - ET ADWARE_PUP Deskwizz.com Spyware Install Code Download (adware_pup.rules)
  • 2003446 - ET ADWARE_PUP Adware Command Client Checkin (adware_pup.rules)
  • 2003450 - ET ADWARE_PUP Specificclick.net Spyware Activity (adware_pup.rules)
  • 2003451 - ET ADWARE_PUP K8l.info Spyware Activity (adware_pup.rules)
  • 2003462 - ET ADWARE_PUP CoolDeskAlert Spyware Activity (adware_pup.rules)
  • 2003472 - ET ADWARE_PUP DelFin Project Spyware (setup-alt) (adware_pup.rules)
  • 2003473 - ET ADWARE_PUP DelFin Project Spyware (payload-alt) (adware_pup.rules)
  • 2003504 - ET ADWARE_PUP E2give Spyware Reporting (check url) (adware_pup.rules)
  • 2003525 - ET ADWARE_PUP Supergames.aavalue.com Spyware (adware_pup.rules)
  • 2003526 - ET ADWARE_PUP KMIP.net Spyware 2 (adware_pup.rules)
  • 2003537 - ET MALWARE Trojan.Duntek establishing remote connection (malware.rules)
  • 2003538 - ET MALWARE Klom.A Connecting to Controller (malware.rules)
  • 2003547 - ET ADWARE_PUP Privacyprotector.com Fake Anti-Spyware Install (adware_pup.rules)
  • 2003577 - ET ADWARE_PUP Mirarsearch.com Spyware Posting Data (adware_pup.rules)
  • 2003579 - ET ADWARE_PUP Findwhat.com Spyware (clickthrough) (adware_pup.rules)
  • 2003581 - ET ADWARE_PUP Findwhat.com Spyware (sendmedia) (adware_pup.rules)
  • 2003605 - ET ADWARE_PUP Baidu.com Spyware Bar Activity (adware_pup.rules)
  • 2003610 - ET ADWARE_PUP Zango Spyware (tbrequest data post) (adware_pup.rules)
  • 2003617 - ET ADWARE_PUP MyWebSearch Toolbar Posting Activity Report (adware_pup.rules)
  • 2003620 - ET ADWARE_PUP 51yes.com Spyware Reporting User Activity (adware_pup.rules)
  • 2003630 - ET ADWARE_PUP Baidu.com Spyware Sobar Bar Activity (adware_pup.rules)
  • 2003903 - ET WEB_SERVER Microsoft SharePoint XSS Attempt default.aspx (web_server.rules)
  • 2003904 - ET WEB_SERVER Microsoft SharePoint XSS Attempt index.php form mail (web_server.rules)
  • 2004556 - ET WEB_SERVER Cisco CallManager XSS Attempt serverlist.asp pattern (web_server.rules)
  • 2005319 - ET ADWARE_PUP Bizconcept.info Spyware Checkin (adware_pup.rules)
  • 2006377 - ET MALWARE Downloader.Win32.Agent.bwr CnC Beacon (malware.rules)
  • 2006400 - ET MALWARE Downloader.26001 Url Pattern Detected (malware.rules)
  • 2006401 - ET MALWARE Downloader.26001 Url Pattern Detected (lunch_id) (malware.rules)
  • 2006403 - ET MALWARE General Trojan Checkin by MAC chkmac.php (malware.rules)
  • 2006404 - ET MALWARE DownLoader.30525 Checkin (malware.rules)
  • 2006405 - ET MALWARE Proxy.Win32.Agent.mx CnC Beacon (malware.rules)
  • 2006411 - ET MALWARE Storm Worm HTTP Request (malware.rules)
  • 2006427 - ET ADWARE_PUP Doctorpro.co.kr Related Fake Anti-Spyware Mac Check (adware_pup.rules)
  • 2006428 - ET ADWARE_PUP Doctorpro.co.kr Related Fake Anti-Spyware Checkin (open) (adware_pup.rules)
  • 2006431 - ET ADWARE_PUP Doctorpro.co.kr Related Fake Anti-Spyware Post (adware_pup.rules)
  • 2006432 - ET ADWARE_PUP Doctorpro.co.kr Related Fake Anti-Spyware Checkin (ret) (adware_pup.rules)
  • 2006433 - ET ADWARE_PUP Doctorpro.co.kr Related Fake Anti-Spyware Post (api_result) (adware_pup.rules)
  • 2007284 - ET MALWARE Downloader.Win32.Agent.cav Url Pattern Detected (ping) (malware.rules)
  • 2007566 - ET MALWARE Downloader.MisleadApp Fake Security Product Install (malware.rules)
  • 2007587 - ET MALWARE General Downloader or Virut C&C Ack (malware.rules)
  • 2007593 - ET ADWARE_PUP SpyShredder Fake Anti-Spyware Install Download (adware_pup.rules)
  • 2007595 - ET MALWARE Downloader.Dluca HTTP Checkin (malware.rules)
  • 2007610 - ET MALWARE Win32.Small.qh/xSock Checkin URL Detected (malware.rules)
  • 2007620 - ET MALWARE Zlob Updating via HTTP (v2) (malware.rules)
  • 2007642 - ET ADWARE_PUP Viruscheck.co.kr Related Fake Anti-Spyware Post (chkvs) (adware_pup.rules)
  • 2007644 - ET MALWARE Win32.Agent.cah Checkin Request (malware.rules)
  • 2007674 - ET MALWARE E-Jihad 3.0 DNS Activity TCP (2) (malware.rules)
  • 2007675 - ET MALWARE E-Jihad 3.0 DNS Activity TCP (3) (malware.rules)
  • 2007676 - ET MALWARE E-Jihad 3.0 DNS Activity TCP (4) (malware.rules)
  • 2007677 - ET MALWARE E-Jihad 3.0 DNS Activity TCP (5) (malware.rules)
  • 2007678 - ET MALWARE E-Jihad 3.0 DNS Activity UDP (1) (malware.rules)
  • 2007679 - ET MALWARE E-Jihad 3.0 DNS Activity UDP (2) (malware.rules)
  • 2007680 - ET MALWARE E-Jihad 3.0 DNS Activity UDP (3) (malware.rules)
  • 2007681 - ET MALWARE E-Jihad 3.0 DNS Activity UDP (4) (malware.rules)
  • 2007682 - ET MALWARE E-Jihad 3.0 DNS Activity UDP (5) (malware.rules)
  • 2007683 - ET MALWARE E-Jihad 3.0 HTTP Activity 1 (malware.rules)
  • 2007684 - ET MALWARE E-Jihad 3.0 HTTP Activity 2 (malware.rules)
  • 2007685 - ET MALWARE E-Jihad 3.0 HTTP Activity 3 (malware.rules)
  • 2007688 - ET MALWARE Prg Trojan HTTP POST v1 (malware.rules)
  • 2007696 - ET ADWARE_PUP Softwarereferral.com Adware Checkin (adware_pup.rules)
  • 2007724 - ET MALWARE Prg Trojan HTTP POST version 2 (malware.rules)
  • 2007749 - ET ADWARE_PUP host-domain-lookup.com spyware related Checkin (adware_pup.rules)
  • 2007807 - ET MALWARE Rcash.co.kr Bootup Checkin via HTTP (malware.rules)
  • 2007811 - ET MALWARE Metajuan trojan checkin (malware.rules)
  • 2007834 - ET MALWARE Renos/ssd.com HTTP Checkin (malware.rules)
  • 2007838 - ET MALWARE Delf HTTP Checkin (1) (malware.rules)
  • 2007861 - ET ADWARE_PUP Softcashier.com Spyware Install Checkin (adware_pup.rules)
  • 2007864 - ET MALWARE Banload HTTP Checkin Detected (malware.rules)
  • 2007939 - ET MALWARE Delf Checkin via HTTP (up) (malware.rules)
  • 2007940 - ET MALWARE Banker.ili HTTP Checkin (malware.rules)
  • 2007945 - ET ADWARE_PUP SysVenFak Fake AV Package Victim Checkin (victim.php) (adware_pup.rules)
  • 2007952 - ET MALWARE Downloader.49651 Checkin (malware.rules)
  • 2007953 - ET MALWARE Downloader.49651 Install Report (malware.rules)
  • 2007954 - ET MALWARE Downloader.49651 Online Report (malware.rules)
  • 2007955 - ET MALWARE Cygo Checkin (malware.rules)
  • 2007965 - ET MALWARE Goldun Reporting Install (malware.rules)
  • 2007978 - ET ADWARE_PUP Direct-web.co.kr Related Spyware Checkin (adware_pup.rules)
  • 2007984 - ET MALWARE Banker Trojan (General) HTTP Checkin (malware.rules)
  • 2007986 - ET MALWARE Emogen Reporting via HTTP (malware.rules)
  • 2007996 - ET ADWARE_PUP Sears.com/Kmart.com My SHC Community spyware download (adware_pup.rules)
  • 2008016 - ET ADWARE_PUP Servicepack.kr Fake Patch Software Checkin (adware_pup.rules)
  • 2008067 - ET ADWARE_PUP Kwsearchguide.com Related Spyware Checkin (adware_pup.rules)
  • 2008069 - ET ADWARE_PUP Kwsearchguide.com Related Spyware Keepalive (adware_pup.rules)
  • 2008071 - ET MALWARE Delf Checkin via HTTP (6) (malware.rules)
  • 2008087 - ET MALWARE Downloader.VB.CEJ HTTP Checkin (malware.rules)
  • 2008090 - ET MALWARE Delf Checkin via HTTP (7) (malware.rules)
  • 2008130 - ET MALWARE Win32.Lydra.hj HTTP Checkin (malware.rules)
  • 2008135 - ET ADWARE_PUP Soft-Show.cn Related Fake AV Install (adware_pup.rules)
  • 2008136 - ET MALWARE Egspy Install Report via HTTP (malware.rules)
  • 2008144 - ET MALWARE Proxy.Corpes.j Infection Report (malware.rules)
  • 2008148 - ET ADWARE_PUP Soft-Show.cn Related Fake AV Install Ad Pull (adware_pup.rules)
  • 2008153 - ET MALWARE Citi-bank.ru Related Trojan Checkin (malware.rules)
  • 2008157 - ET ADWARE_PUP Sidelinker.com-Upspider.com Spyware Checkin (adware_pup.rules)
  • 2008158 - ET ADWARE_PUP Sidelinker.com-Upspider.com Spyware Count (adware_pup.rules)
  • 2008261 - ET MALWARE Common Spambot HTTP Checkin (malware.rules)
  • 2008275 - ET MALWARE Hitpop Checkin (malware.rules)
  • 2008277 - ET MALWARE Win32/Kryptik.AR Variant Winifixer.com Related Checkin URL (malware.rules)
  • 2008356 - ET ADWARE_PUP Seekmo.com Spyware Data Upload (adware_pup.rules)
  • 2008358 - ET MALWARE Pakes/Cutwail/Kobcka Checkin Detected High Ports (malware.rules)
  • 2008366 - ET MALWARE LD Pinch Checkin (HTTP POST on port 82) (malware.rules)
  • 2008384 - ET MALWARE Piptea.a Related Trojan Checkin (3) (malware.rules)
  • 2008397 - ET MALWARE Fullspace.cc or Related Checkin (1) (malware.rules)
  • 2008405 - ET MALWARE Obitel trojan calling home (malware.rules)
  • 2008419 - ET ADWARE_PUP Advert-network.com Related Spyware Updating (adware_pup.rules)
  • 2008430 - ET MALWARE Win32.Dialer.buv Sending Information Home (malware.rules)
  • 2008456 - ET ADWARE_PUP EMO/PCPrivacyCleaner Rougue Secuirty App GET Checkin (adware_pup.rules)
  • 2008473 - ET MALWARE HotLan.C Spambot Trojan Activity (malware.rules)
  • 2008490 - ET MALWARE Dialer.Win32.E-Group.n Checkin (malware.rules)
  • 2008493 - ET MALWARE Pushdo Checkin (malware.rules)
  • 2008502 - ET MALWARE Antispywareexpert.com Fake AS Install Checkin (malware.rules)
  • 2008506 - ET MALWARE Trojan-PWS.Win32.VB.tr Checkin Detected (malware.rules)
  • 2008511 - ET MALWARE Win32/Antivirus2008 Fake AV Install Report (malware.rules)
  • 2008519 - ET MALWARE Win32.Agent.zrm/Infostealer.Bancos Checkin (malware.rules)
  • 2008523 - ET MALWARE Proxy.Win32.Fackemo.g/Katusha/FakeAlert Checkin (malware.rules)
  • 2008580 - ET MALWARE Trojan Sinowal/Torpig Phoning Home (malware.rules)
  • 2008623 - ET MALWARE Cinmus.Checkin 1 (malware.rules)
  • 2008624 - ET MALWARE Cinmus.Checkin 2 (malware.rules)
  • 2008661 - ET MALWARE Zbot/Zeus HTTP POST (malware.rules)
  • 2008667 - ET MALWARE Backdoor.Win32.Agent.fvt Checkin (malware.rules)
  • 2008681 - ET ADWARE_PUP iframebiz - /qwertyuiyw12ertyuytre/adv***.php (adware_pup.rules)
  • 2008689 - ET MALWARE Gimmiv.A.dll Infection (malware.rules)
  • 2008753 - ET ADWARE_PUP AdWare.Win32.Yokbar Checkin URL (adware_pup.rules)
  • 2008755 - ET MALWARE Autorun.qvi Related HTTP Get on Off Port (malware.rules)
  • 2008758 - ET MALWARE McBoo.com is for sale | HugeDomains related Trojan Checkin URL (malware.rules)
  • 2008839 - ET ADWARE_PUP AdWare.Win32.MWGuide checkin (adware_pup.rules)
  • 2008840 - ET ADWARE_PUP AdWare.Win32.MWGuide keepalive (adware_pup.rules)
  • 2008917 - ET ADWARE_PUP Hotbar.com Related Spyware Install Report (adware_pup.rules)
  • 2008918 - ET ADWARE_PUP Hotbar.com Related Spyware Activity Report (adware_pup.rules)
  • 2008972 - ET MALWARE Pointfree.co.kr Trojan/Spyware Infection Checkin (malware.rules)
  • 2008973 - ET MALWARE onmuz.com Infection Activity (malware.rules)
  • 2009003 - ET MALWARE Win32/Korklic.A (malware.rules)
  • 2009114 - ET MALWARE Downadup/Conficker A Worm reporting (malware.rules)
  • 2009126 - ET MALWARE Win32/Monkif Downloader Checkin (malware.rules)
  • 2009209 - ET MALWARE Rogue A/V Win32/FakeXPA GET Request (malware.rules)
  • 2009345 - ET ATTACK_RESPONSE HTTP 401 Unauthorized (attack_response.rules)
  • 2009349 - ET MALWARE Metafisher/Bzub/Cimuz/Tanspy Reporting User Activity (malware.rules)
  • 2009351 - ET MALWARE Urlzone/Bebloh Communication with Controller (malware.rules)
  • 2009354 - ET MALWARE Bredolab Downloader Communicating With Controller (2) (malware.rules)
  • 2009405 - ET MALWARE Personal Defender 2009 - prinimalka.py (malware.rules)
  • 2009406 - ET MALWARE Personal Defender 2009 - trash.py (malware.rules)
  • 2009408 - ET MALWARE Patcher/Bankpatch V2 Communication with Controller (malware.rules)
  • 2009409 - ET MALWARE Patcher/Bankpatch Module Download Request (malware.rules)
  • 2009453 - ET MALWARE BANLOAD Downloader GET Checkin (malware.rules)
  • 2009484 - ET WEB_SERVER Cpanel lastvisit.html Arbitary file disclosure (web_server.rules)
  • 2009514 - ET MALWARE FAKE/ROGUE AV HTTP Post (malware.rules)
  • 2009522 - ET MALWARE Win32/Pasta Downloader - GET Checkin to Fake GIF (malware.rules)
  • 2009712 - ET ADWARE_PUP Adware PlusDream - GET Config Download/Update (adware_pup.rules)
  • 2009752 - ET MALWARE Monkif/DlKroha Trojan Activity HTTP Outbound (malware.rules)
  • 2009880 - ET ADWARE_PUP Casalemedia Spyware Reporting URL Visited 3 (adware_pup.rules)
  • 2010007 - ET MALWARE Potential Gemini Malware Download (malware.rules)
  • 2010072 - ET MALWARE Bredolab Infection - Windows Key (malware.rules)
  • 2010153 - ET MALWARE Koobface fetch C&C command detected (malware.rules)
  • 2010158 - ET MALWARE Nanspy Bot Checkin (malware.rules)
  • 2010224 - ET MALWARE Opachki Link Hijacker Traffic Redirection (malware.rules)
  • 2010230 - ET MALWARE W32.Koblu (malware.rules)
  • 2010248 - ET MALWARE Eleonore Exploit Pack activity (malware.rules)
  • 2010266 - ET MALWARE Banload Checkin (malware.rules)
  • 2010267 - ET MALWARE Sinowal/Torpig Checkin (malware.rules)
  • 2010281 - ET WEB_SERVER Apache mod_perl Apache Status and Apache2 Status Cross Site Scripting Attempt (web_server.rules)
  • 2010283 - ET MALWARE Opachki Link Hijacker HTTP Header Injection (malware.rules)
  • 2010337 - ET MALWARE FakeAV Reporting - POST often to resolution|borders.php (malware.rules)
  • 2010347 - ET MALWARE Fake/Rogue AV Landing Page Encountered (malware.rules)
  • 2010379 - ET WEB_SERVER JBOSS/JMX REMOTE WAR deployment attempt (POST) (web_server.rules)
  • 2010450 - ET MALWARE Potential Gemini/Fake AV Download URL Detected (malware.rules)
  • 2010452 - ET MALWARE Potential Fake AV GET installer.1.exe (malware.rules)
  • 2010453 - ET MALWARE Potential Fake AV GET installer_1.exe (malware.rules)
  • 2010465 - ET MALWARE Potential Fake AV Download (download/install.php) (malware.rules)
  • 2010554 - ET DOS Netgear DG632 Web Management Denial Of Service Attempt (dos.rules)
  • 2010565 - ET MALWARE Bebloh C&C HTTP POST (malware.rules)
  • 2010674 - ET DOS Cisco 4200 Wireless Lan Controller Long Authorisation Denial of Service Attempt (dos.rules)
  • 2010723 - ET MALWARE Oficla Russian Malware Bundle C&C instruction response with runurl (malware.rules)
  • 2010724 - ET MALWARE Oficla Russian Malware Bundle C&C instruction response (malware.rules)
  • 2010744 - ET MALWARE Oficla Russian Malware Bundle C&C instruction response (2) (malware.rules)
  • 2010787 - ET MALWARE Knockbot Proxy Response From Controller (malware.rules)
  • 2010790 - ET MALWARE Bredavi Configuration Update Response (malware.rules)
  • 2010821 - ET MALWARE Java Downloader likely malicious payload download src=xrun (malware.rules)
  • 2010905 - ET ADWARE_PUP Fake Mozilla UA Outbound (Mozilla/0.xx) (adware_pup.rules)
  • 2011086 - ET MALWARE Trojan-Dropper.Win32.Flystud (malware.rules)
  • 2011128 - ET MALWARE Eleonore Exploit Pack activity variant May 2010 (malware.rules)
  • 2011180 - ET EXPLOIT_KIT Phoenix Exploit Kit pdfopen.pdf (exploit_kit.rules)
  • 2011181 - ET EXPLOIT_KIT Phoenix Exploit Kit pdfswf.pdf (exploit_kit.rules)
  • 2011182 - ET EXPLOIT_KIT Phoenix Exploit Kit - libtiff.pdf (exploit_kit.rules)
  • 2011186 - ET MALWARE Nine Ball Infection ya.ru Post (malware.rules)
  • 2011234 - ET MALWARE Cosmu Process Dump Report (malware.rules)
  • 2011236 - ET MALWARE Trojan-Downloader Win32.Genome.avan (malware.rules)
  • 2011280 - ET EXPLOIT_KIT Phoenix Exploit Kit - Admin Login Page Detected Outbound (exploit_kit.rules)
  • 2011348 - ET EXPLOIT_KIT DRIVEBY SEO Exploit Kit request for PDF exploit (exploit_kit.rules)
  • 2011402 - ET MALWARE Yoyo-DDoS Bot HTTP Flood Attack Inbound (malware.rules)
  • 2011414 - ET MALWARE Win32/Small.gen!AQ Communication with Controller (malware.rules)
  • 2011419 - ET MALWARE FAKEAV landing page - sector.hdd.png no-repeat (malware.rules)
  • 2011420 - ET MALWARE FAKEAV client requesting image - sector.hdd.png (malware.rules)
  • 2011475 - ET MALWARE FAKEAV scanner page enocuntered - .hdd_icon (malware.rules)
  • 2011495 - ET MALWARE Executable Download named to be .com FQDN (malware.rules)
  • 2011496 - ET MALWARE Executable Download named to be FQDN (malware.rules)
  • 2011591 - ET MALWARE Potential-Hiloti/FakeAV site access (malware.rules)
  • 2011693 - ET EXPLOIT_KIT Fragus Exploit Kit Landing (exploit_kit.rules)
  • 2011769 - ET MALWARE Shiz/Rohimafo Binary Download Request (malware.rules)
  • 2011813 - ET EXPLOIT_KIT SEO Exploit Kit - client exploited (exploit_kit.rules)
  • 2011820 - ET MALWARE Fake AV CnC Checkin cycle_report (malware.rules)
  • 2011849 - ET MALWARE Win32/Comotor.A!dll Reporting 2 (malware.rules)
  • 2011851 - ET MALWARE Carberp CnC Reply no tasks (malware.rules)
  • 2011856 - ET ADWARE_PUP HTML.Psyme.Gen Reporting (adware_pup.rules)
  • 2011862 - ET MALWARE Feodo Banking Trojan Account Details Post (malware.rules)
  • 2011917 - ET MALWARE FAKEAV Gemini - JavaScript Redirection To Scanning Page (malware.rules)
  • 2011921 - ET MALWARE FAKEAV CryptMEN - Landing Page Download Contains .hdd_icon (malware.rules)
  • 2011922 - ET MALWARE FAKEAV CryptMEN - Random Named DeObfuscation JavaScript File Download (malware.rules)
  • 2011938 - ET ADWARE_PUP CryptMEN HTTP library purporting to be MSIE to PHP HTTP 1.0 (adware_pup.rules)
  • 2011939 - ET ADWARE_PUP CryptMEN HTTP library purporting to be MSIE to PHP HTTP 1.1 (adware_pup.rules)
  • 2011989 - ET MALWARE Suspicious executable download adobe-flash.v (malware.rules)
  • 2011995 - ET MALWARE Suspicious invoice.scr Download Request (malware.rules)
  • 2011999 - ET MALWARE Trojan.Spy.YEK MAC and IP POST (malware.rules)
  • 2012076 - ET MALWARE Win32.Krap.ar Infection URL Request (malware.rules)
  • 2012114 - ET MALWARE Trojan.BackDoor-DRV.gen.c Reporting-2 (malware.rules)
  • 2012137 - ET MALWARE Storm/Waledac 3.0 Checkin 1 (malware.rules)
  • 2012155 - ET EXPLOIT Wireshark ENTTEC DMX Data Processing Code Execution Attempt 2 (exploit.rules)
  • 2012279 - ET MALWARE SpyEye HTTP Library Checkin (malware.rules)
  • 2012288 - ET MALWARE Spy.Win32.Agent.bijs Reporting 2 (malware.rules)
  • 2012289 - ET MALWARE Win32 Troxen Reporting (malware.rules)
  • 2012290 - ET MALWARE Spy.Win32.Agent.bijs Reporting 1 (malware.rules)
  • 2012305 - ET MALWARE Night Dragon CnC Traffic Inbound 2 (malware.rules)
  • 2012308 - ET MALWARE Night Dragon Dropper Download Command (malware.rules)
  • 2012309 - ET MALWARE Night Dragon Server Auth to Bot (malware.rules)
  • 2012391 - ET MALWARE Tatanga Checkin (malware.rules)
  • 2012396 - ET WEB_SPECIFIC_APPS Eclipse IDE Help Component Cross Site Scripting Attempt (web_specific_apps.rules)
  • 2012397 - ET WEB_SPECIFIC_APPS Eclipse IDE Help Component Cross Site Scripting Attempt (web_specific_apps.rules)
  • 2012439 - ET MALWARE Win32.Vilsel.akd Reporting (malware.rules)
  • 2012440 - ET MALWARE Downloader.Win32.Agent.bqkb Reporting (malware.rules)
  • 2012448 - ET MALWARE Downloader Win32.Agent.FakeAV.AVG 1 (malware.rules)
  • 2012449 - ET MALWARE Downloader Win32.Agent.FakeAV.AVG 2 (malware.rules)
  • 2012454 - ET MOBILE_MALWARE Android Trojan Fake10086 checkin 1 (mobile_malware.rules)
  • 2012505 - ET MALWARE Monkif Checkin (malware.rules)
  • 2012531 - ET CURRENT_EVENTS WindowsLive Imposter Site blt .png (current_events.rules)
  • 2012532 - ET CURRENT_EVENTS WindowsLive Imposter Site Payload Download (current_events.rules)
  • 2012583 - ET WEB_SPECIFIC_APPS ardeaCore PHP Framework appMVCPath Parameter Remote File Inclusion Attempt (web_specific_apps.rules)
  • 2012584 - ET WEB_SPECIFIC_APPS ardeaCore PHP Framework CURRENT_BLOG_PATH Parameter Remote File Inclusion Attempt (web_specific_apps.rules)
  • 2012590 - ET MALWARE Best Spyware Scanner FaveAV Download (malware.rules)
  • 2012592 - ET MALWARE PWS-Banker.gen.b Reporting (malware.rules)
  • 2012595 - ET WEB_SPECIFIC_APPS mySeatXT SQL Injection Attempt autocomplete.php field SELECT (web_specific_apps.rules)
  • 2012597 - ET WEB_SPECIFIC_APPS mySeatXT SQL Injection Attempt autocomplete.php field INSERT (web_specific_apps.rules)
  • 2012599 - ET WEB_SPECIFIC_APPS mySeatXT SQL Injection Attempt autocomplete.php field ASCII (web_specific_apps.rules)
  • 2012601 - ET WEB_SPECIFIC_APPS WordPress Lazyest Gallery Plugin image Parameter Cross Site Scripting Attempt (web_specific_apps.rules)
  • 2012604 - ET WEB_SPECIFIC_APPS ardeaCore PHP Framework appMVCPath Parameter Remote File Inclusion Attempt (web_specific_apps.rules)
  • 2012605 - ET WEB_SPECIFIC_APPS ardeaCore PHP Framework CURRENT_BLOG_PATH Parameter Remote File Inclusion Attempt (web_specific_apps.rules)
  • 2012609 - ET EXPLOIT Phoenix Java Exploit Attempt Request for .class from octal host (exploit.rules)
  • 2012625 - ET CURRENT_EVENTS Potential Lizamoon Client Request /ur.php (current_events.rules)
  • 2012628 - ET EXPLOIT Java Exploit Attempt Request for .id from octal host (exploit.rules)
  • 2012644 - ET EXPLOIT Java Exploit Attempt Request for hostile binary (exploit.rules)
  • 2012650 - ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain (malware.rules)
  • 2012782 - ET MOBILE_MALWARE SymbOS SuperFairy.D StartUpdata.ini Missing File HTTP Request (mobile_malware.rules)
  • 2012783 - ET MOBILE_MALWARE SymbOS SuperFairy.D BackgroundUpdata.ini Missing File HTTP Request (mobile_malware.rules)
  • 2012784 - ET MOBILE_MALWARE SymbOS SuperFairy.D active.txt Missing File HTTP Request (mobile_malware.rules)
  • 2012828 - ET MALWARE Win32/Rimecud download (malware.rules)
  • 2012839 - ET MALWARE Trojan-Downloader.Win32.Small Checkin (malware.rules)
  • 2012844 - ET MOBILE_MALWARE SymbOS/Yxes.B/E CnC Checkin Request (mobile_malware.rules)
  • 2012845 - ET MOBILE_MALWARE SymbOS/Yxes CnC Checkin Request (mobile_malware.rules)
  • 2012846 - ET MOBILE_MALWARE SymbOS/Yxes CnC Checkin Request 2 (mobile_malware.rules)
  • 2012847 - ET MOBILE_MALWARE SymbOS/Yxes.F CnC Checkin Request 3 (mobile_malware.rules)
  • 2012850 - ET MOBILE_MALWARE SymbOS.Flexispy.a Commercial Spying App Sending User Information to Server (mobile_malware.rules)
  • 2012851 - ET MOBILE_MALWARE SymbOS/Yxes.I PropertyFile.jsp CnC Server Communication (mobile_malware.rules)
  • 2012852 - ET MOBILE_MALWARE SymbOS/Yxes.I TipFile.jsp CnC Server Communication (mobile_malware.rules)
  • 2012853 - ET MOBILE_MALWARE SymbOS/Yxes.I NumberFile.jsp CnC Server Communication (mobile_malware.rules)
  • 2012855 - ET MOBILE_MALWARE SPR/MobileSpy Mobile Spyware Sending Geographic Location Logs To Remote Server (mobile_malware.rules)
  • 2012856 - ET MOBILE_MALWARE SPR/MobileSpy Mobile Spyware Sending Call Logs to Remote Server (mobile_malware.rules)
  • 2012857 - ET MOBILE_MALWARE SPR/MobileSpy Mobile Spyware Sending SMS Logs to Remote Server (mobile_malware.rules)
  • 2012858 - ET MOBILE_MALWARE SymbOS.Sagasi.a Worm Sending Data to Server (mobile_malware.rules)
  • 2012859 - ET MOBILE_MALWARE SymbOS.Sagasi.a Worm Sending Data to Server (mobile_malware.rules)
  • 2012864 - ET MOBILE_MALWARE SslCrypt Server Communication (mobile_malware.rules)
  • 2012867 - ET MALWARE Clicker.Win32.AutoIt.ai Checkin (malware.rules)
  • 2012871 - ET MALWARE Gozi posting form data (malware.rules)
  • 2012904 - ET MOBILE_MALWARE SymbOS/SuperFairy.D Bookmarked Connection to Server (mobile_malware.rules)
  • 2012940 - ET EXPLOIT Eleonore Exploit Pack exemple.com Request (exploit.rules)
  • 2012942 - ET EXPLOIT_KIT Phoenix Exploit Kit Printf.pdf (exploit_kit.rules)
  • 2012943 - ET EXPLOIT_KIT Phoenix Exploit Kit Geticon.pdf (exploit_kit.rules)
  • 2012944 - ET EXPLOIT_KIT Phoenix Exploit Kit All.pdf (exploit_kit.rules)
  • 2012984 - ET SMTP Sophos.com Block Message (smtp.rules)
  • 2013011 - ET WEB_CLIENT Malicious PHP 302 redirect response with avtor URI and cookie (web_client.rules)
  • 2013019 - ET MOBILE_MALWARE Iphone iKee.B Checkin (mobile_malware.rules)
  • 2013020 - ET MOBILE_MALWARE DroidKungFu Checkin (mobile_malware.rules)
  • 2013022 - ET MOBILE_MALWARE DroidKungFu Checkin 2 (mobile_malware.rules)
  • 2013024 - ET EXPLOIT_KIT Exploit kit mario.jar (exploit_kit.rules)
  • 2013025 - ET EXPLOIT_KIT Java/PDF Exploit kit from /Home/games/ initial landing (exploit_kit.rules)
  • 2013027 - ET EXPLOIT_KIT Java/PDF Exploit kit initial landing (exploit_kit.rules)
  • 2013046 - ET MALWARE DLoader PWS Module Data Upload Activity (malware.rules)
  • 2013048 - ET CURRENT_EVENTS Fake Shipping Invoice Request to JPG.exe Executable (current_events.rules)
  • 2013062 - ET MALWARE MacShield FakeAV CnC Communication (malware.rules)
  • 2013092 - ET MALWARE VBKrypt.cmtp Login to Server (malware.rules)
  • 2013093 - ET CURRENT_EVENTS Clickfraud Framework Request (current_events.rules)
  • 2013122 - ET MALWARE Vilsel.ayjv Checkin (aid) (malware.rules)
  • 2013140 - ET MOBILE_MALWARE SymbOS/Yxes CnC Checkin Message (mobile_malware.rules)
  • 2013141 - ET MOBILE_MALWARE SymbOS/Yxes Plugucsrv.sisx File Download (mobile_malware.rules)
  • 2013143 - ET MOBILE_MALWARE SymbOS/Yxes KernelPara.jsp CnC Checkin Message (mobile_malware.rules)
  • 2013155 - ET WEB_SPECIFIC_APPS Wordpress plugin Flash Album Gallery pid Parameter SELECT FROM SQL Injection Attempt (web_specific_apps.rules)
  • 2013165 - ET EXPLOIT 2Wire Password Reset Vulnerability via GET (exploit.rules)
  • 2013166 - ET EXPLOIT 2Wire Password Reset Vulnerability via POST (exploit.rules)
  • 2013167 - ET EXPLOIT FreeBSD OpenSSH 3.5p1 possible vulnerable server (exploit.rules)
  • 2013193 - ET MOBILE_MALWARE Android.CruseWin Retriving XML File from Hard Coded CnC (mobile_malware.rules)
  • 2013198 - ET MALWARE Trojan/Hacktool.Sniffer Initial Checkin (malware.rules)
  • 2013225 - ET MALWARE W32/IRCBrute Checkin 2 (malware.rules)
  • 2013259 - ET MALWARE Guagua Trojan Update Checkin (malware.rules)
  • 2013260 - ET MALWARE Win32/Nekill Checkin (malware.rules)
  • 2013261 - ET MOBILE_MALWARE SymbOS/CommDN Downloading Second Stage Malware Binary (mobile_malware.rules)
  • 2013265 - ET MOBILE_MALWARE SymbOS/SymGam CnC Checkin (mobile_malware.rules)
  • 2013291 - ET MALWARE Win32/Cycbot Pay-Per-Install Executable Download (malware.rules)
  • 2013292 - ET MALWARE Win32/Cycbot Initial Checkin to CnC (malware.rules)
  • 2013340 - ET MALWARE FakeAV/Application JPDesk/Delf checkin (malware.rules)
  • 2013353 - ET WEB_CLIENT Wordpress possible Malicious DNS-Requests - flickr.com.* (web_client.rules)
  • 2013354 - ET WEB_CLIENT Wordpress possible Malicious DNS-Requests - picasa.com.* (web_client.rules)
  • 2013355 - ET WEB_CLIENT Wordpress possible Malicious DNS-Requests - blogger.com.* (web_client.rules)
  • 2013357 - ET WEB_CLIENT Wordpress possible Malicious DNS-Requests - wordpress.com.* (web_client.rules)
  • 2013358 - ET WEB_CLIENT Wordpress possible Malicious DNS-Requests - img.youtube.com.* (web_client.rules)
  • 2013359 - ET WEB_CLIENT Wordpress possible Malicious DNS-Requests - upload.wikimedia.com.* (web_client.rules)
  • 2013360 - ET WEB_CLIENT Wordpress possible Malicious DNS-Requests - photobucket.com.* (web_client.rules)
  • 2013362 - ET MALWARE HTran/SensLiceld.A Checkin 2 (unicode) (malware.rules)
  • 2013366 - ET MALWARE FakeAV Checkin (malware.rules)
  • 2013384 - ET MALWARE W32/Siscos CnC Checkin (malware.rules)
  • 2013447 - ET MALWARE Win32/TrojanDownloader.Chekafe.D Initial Checkin (malware.rules)
  • 2013461 - ET ADWARE_PUP Win32/Wizpop Initial Checkin (adware_pup.rules)
  • 2013474 - ET EXPLOIT_KIT DRIVEBY ACH - Redirection (exploit_kit.rules)
  • 2013484 - ET EXPLOIT Phoenix Java MIDI Exploit Received By Vulnerable Client (exploit.rules)
  • 2013485 - ET EXPLOIT Phoenix Java MIDI Exploit Received (exploit.rules)
  • 2013486 - ET WEB_CLIENT Phoenix landing page JAVASMB (web_client.rules)
  • 2013502 - ET ADWARE_PUP Win32/Wizpop Checkin (adware_pup.rules)
  • 2013513 - ET MALWARE W32/Bancos Reporting (malware.rules)
  • 2013519 - ET MALWARE Driveby Loader Request sn.php (malware.rules)
  • 2013532 - ET MALWARE Backdoor.Win32.Fynloski.A Command Request (malware.rules)
  • 2013533 - ET MALWARE Backdoor.Win32.Fynloski.A Command Response (malware.rules)
  • 2013555 - ET MALWARE Fivfrom Downloader (Unitrix) (malware.rules)
  • 2013560 - ET MALWARE Potentially Unwanted Program Storm3-607.exe Download Reporting (malware.rules)
  • 2013661 - ET EXPLOIT_KIT Exploit kit worms.jar (exploit_kit.rules)
  • 2013662 - ET EXPLOIT Crimepack Java exploit attempt(2) (exploit.rules)
  • 2013723 - ET MALWARE Win32/Daemonize Trojan Proxy Initial Checkin (malware.rules)
  • 2013766 - ET MALWARE Win32.Swisyn Reporting (malware.rules)
  • 2013768 - ET MALWARE Win32.Dropper.Wlock Checkin (malware.rules)
  • 2013769 - ET MALWARE Backdoor.Win32.Prosti Checkin (malware.rules)
  • 2013776 - ET EXPLOIT_KIT Saturn Exploit Kit probable Java exploit request (exploit_kit.rules)
  • 2013794 - ET MALWARE Dropper.Win32.Npkon Server Responce (malware.rules)
  • 2013799 - ET MALWARE Win32.Trojan.SuspectCRC FakeAV Checkin (malware.rules)
  • 2013821 - ET MALWARE Trojan.Kryptik/proscan.co.kr Checkin (malware.rules)
  • 2013868 - ET MALWARE Win32/Sefbov.E Reporting (malware.rules)
  • 2013890 - ET MALWARE W32/Koobface Variant Initial Checkin (malware.rules)
  • 2013900 - ET MALWARE W32/Yaq Checkin (malware.rules)
  • 2013902 - ET MALWARE Win32.BlackControl Retrieving IP Information (malware.rules)
  • 2013912 - ET MALWARE P2P Zeus Response From CnC (malware.rules)
  • 2013916 - ET EXPLOIT_KIT Incognito Exploit Kit Java request to showthread.php?t= (exploit_kit.rules)
  • 2013948 - ET MALWARE PWS.TIBIA Checkin or Data Post (malware.rules)
  • 2013949 - ET MALWARE PWS.TIBIA Checkin or Data Post 2 (malware.rules)
  • 2013975 - ET EXPLOIT_KIT Neosploit Java Exploit Kit request to /? plus hex 32 (exploit_kit.rules)
  • 2013983 - ET ADWARE_PUP Adware-Win32/EoRezo Reporting (adware_pup.rules)
  • 2013993 - ET WEB_SPECIFIC_APPS Cacti Input Validation Attack 2 (web_specific_apps.rules)
  • 2013996 - ET CURRENT_EVENTS Adobe PDF Universal 3D file corrupted download 1 (current_events.rules)
  • 2013997 - ET CURRENT_EVENTS Adobe PDF Universal 3D file corrupted download 2 (current_events.rules)
  • 2014029 - ET MALWARE Agent.UGP!tr/Cryptor/Graftor Dropper Requesting exe (malware.rules)
  • 2014039 - ET WEB_CLIENT MALVERTISING Alureon Malicious IFRAME (web_client.rules)
  • 2014040 - ET MALWARE Win32.PowerPointer checkin (malware.rules)
  • 2014044 - ET MALWARE SpyEye Checkin version 1.3.25 or later 2 (malware.rules)
  • 2014616 - ET MALWARE Win32/Usteal.B Checkin (malware.rules)
  • 2014804 - ET MALWARE VBS/Wimmie.A Checkin (malware.rules)
  • 2016460 - ET MALWARE WEBC2-CSON Checkin - APT1 Related (malware.rules)
  • 2800254 - ETPRO WEB_SERVER Apache mod_imap and mod_imagemap Module Cross-Site Scripting (web_server.rules)
  • 2800389 - ETPRO ADWARE_PUP Trojan Downloader Exchanger.Gen2 (adware_pup.rules)
  • 2800540 - ETPRO SQL Oracle TimesTen In-Memory Database HTTP Request Denial of Service (sql.rules)
  • 2800569 - ETPRO WEB_SERVER Microsoft SharePoint Server Help.aspx Denial of Service 1 (web_server.rules)
  • 2800570 - ETPRO WEB_SERVER Microsoft SharePoint Server Help.aspx Denial of Service 2 (web_server.rules)
  • 2800573 - ETPRO WEB_SERVER Microsoft IIS Directory Authentication Security Bypass (web_server.rules)
  • 2800582 - ETPRO WEB_SERVER Novell Teaming ajaxUploadImageFile Remote Code Execution (web_server.rules)
  • 2800798 - ETPRO WEB_SERVER Microsoft IIS Repeated Parameter Request Denial Of Service (web_server.rules)
  • 2800823 - ETPRO MALWARE Backdoor.Win32.Mexbank.A Checkin Response (malware.rules)
  • 2800873 - ETPRO ADWARE_PUP Adware.Win32.FlvTube (auto search) (adware_pup.rules)
  • 2800920 - ETPRO MALWARE Backdoor.MSIL.Noszbot Checkin POST 2 (malware.rules)
  • 2800944 - ETPRO MALWARE Trojan.Win32.Konad.A Receiving Config (malware.rules)
  • 2800953 - ETPRO MALWARE Download.Win32.Genome.bwmu Fake Adobe Reader Download Request (malware.rules)
  • 2800954 - ETPRO MALWARE Backdoor.Win32.Ripinip Requesting Config (malware.rules)
  • 2800955 - ETPRO MALWARE Backdoor.Win32.Ripinip Receiving config (malware.rules)
  • 2801206 - ETPRO ADWARE_PUP Cloudweb Spyware Updating (adware_pup.rules)
  • 2801242 - ETPRO EXPLOIT CA ARCserve D2D Axis2 Default Credentials (exploit.rules)
  • 2801245 - ETPRO MALWARE TrojanDownloader Win32/VB.NP Checkin (malware.rules)
  • 2801247 - ETPRO ADWARE_PUP Zango Spyware Install Checkin (adware_pup.rules)
  • 2801266 - ETPRO MALWARE Backdoor.Win32.Coofus.RFM Checkin 1 (malware.rules)
  • 2801267 - ETPRO MALWARE Backdoor.Win32.Coofus.RFM Checkin 2 (malware.rules)
  • 2801269 - ETPRO WEB_CLIENT Microsoft Windows Kodak Image Viewer Flowbit Set Big Endian (web_client.rules)
  • 2801270 - ETPRO WEB_CLIENT Microsoft Windows Kodak Image Viewer Flowbit Set Little Endian (web_client.rules)
  • 2801273 - ETPRO ADWARE_PUP Gabpath.com Toolbar Tracker Update (adware_pup.rules)
  • 2801287 - ETPRO WORM Worm.Win32.Autorun.AAV Checkin (worm.rules)
  • 2801288 - ETPRO MALWARE Backdoor.Win32.Ganipin.A Receiving Commands from Server (malware.rules)
  • 2801289 - ETPRO WORM Worm.Win32.Slenfbot.G Checkin 1 (worm.rules)
  • 2801290 - ETPRO WORM Worm.Win32.Slenfbot.G Checkin 2 (worm.rules)
  • 2801291 - ETPRO WORM Worm.Win32.Slenfbot.G Checkin 3 (worm.rules)
  • 2801302 - ETPRO MALWARE RogueSoftware.Win32.WindowsOptimizationAndSecurity Sending stolen info (malware.rules)
  • 2801304 - ETPRO POP3 Inetserv 3.23 POP3 DoS (pop3.rules)
  • 2801305 - ETPRO POP3 Inetserv 3.23 POP3 DoS (RETR) (pop3.rules)
  • 2801306 - ETPRO POP3 Inetserv 3.23 POP3 DoS (DELE) (pop3.rules)
  • 2801308 - ETPRO MALWARE Trojan.Win32.Bohu.A check in (malware.rules)
  • 2801309 - ETPRO MALWARE Backdoor.Win32.Pefsire.A Checkin (malware.rules)
  • 2801322 - ETPRO MALWARE Win32.Dogrobot activity on port 123 (malware.rules)
  • 2801326 - ETPRO RPC Microsoft Kerberos Encryption Downgrade to DES TCP (rpc.rules)
  • 2801329 - ETPRO MALWARE Trojan.Win32.Delf.MW Checkin 1 (malware.rules)
  • 2801330 - ETPRO MALWARE Trojan.Win32.Delf.MW Checkin 2 (malware.rules)
  • 2801331 - ETPRO MALWARE Worm.Win32.Autorun.ABB checkin (malware.rules)
  • 2801347 - ETPRO MALWARE Mariposa or Palevo Bot Checkin to Server (malware.rules)
  • 2801351 - ETPRO MALWARE Win32/Small.AII Checkin (malware.rules)
  • 2801352 - ETPRO MALWARE Trojan.Win32.Dreammon.D Checkin (malware.rules)
  • 2801368 - ETPRO MALWARE Backdoor.Win32.Talsab.B Reporting Information (malware.rules)
  • 2801383 - ETPRO WORM Worm.Win32.Imamihong.A flowbits set 1 (worm.rules)
  • 2801384 - ETPRO WORM Worm.Win32.Imamihong.A Activity 1 (worm.rules)
  • 2801385 - ETPRO WORM Worm.Win32.Imamihong.A flowbits set 1 (worm.rules)
  • 2801386 - ETPRO WORM Worm.Win32.Imamihong.A Activity 2 (worm.rules)
  • 2801389 - ETPRO MALWARE Trojan-Downloader.Win32.Redonc.A Checkin (malware.rules)
  • 2801396 - ETPRO ADWARE_PUP Hotbar Checkin and Report (adware_pup.rules)
  • 2801400 - ETPRO MALWARE Win32.Vilsel.awhu Checkin via Email Form (malware.rules)
  • 2801401 - ETPRO MALWARE Win32.Vilsel.awhu Checkin via Email Form Inbound (malware.rules)
  • 2801406 - ETPRO MALWARE Malware Backdoor.Win32.Apocalipto.A Checkin (malware.rules)
  • 2801413 - ETPRO MALWARE Trojan.Win32.Socnet.A Activity (malware.rules)
  • 2801418 - ETPRO ADWARE_PUP RogueSoftware.Win32.AVGAntivirus2011 Checkin 1 (adware_pup.rules)
  • 2801419 - ETPRO ADWARE_PUP RogueSoftware.Win32.AVGAntivirus2011 Checkin 2 (adware_pup.rules)
  • 2801420 - ETPRO ADWARE_PUP RogueSoftware.Win32.AVGAntivirus2011 Checkin 3 (adware_pup.rules)
  • 2801425 - ETPRO ADWARE_PUP Adware.Win32.OpenCandy Checkin 2 (adware_pup.rules)
  • 2801437 - ETPRO MALWARE Chnsystems.com related trojan checkin (malware.rules)
  • 2801438 - ETPRO MALWARE Chnsystems.com related trojan checkin 2 (malware.rules)
  • 2801487 - ETPRO NETBIOS Microsoft Windows Backup Manager fveapi.dll Insecure Library Loading - SMB-DS ASCII (netbios.rules)
  • 2801488 - ETPRO NETBIOS Microsoft Windows Backup Manager fveapi.dll Insecure Library Loading - SMB Unicode (netbios.rules)
  • 2801489 - ETPRO NETBIOS Microsoft Windows Backup Manager fveapi.dll Insecure Library Loading - SMB ASCII (netbios.rules)
  • 2801490 - ETPRO WEB_CLIENT Microsoft Windows Backup Manager fveapi.dll Insecure Library Loading fveapi.dll (web_client.rules)
  • 2801492 - ETPRO NETBIOS Microsoft Internet Connection Signup Wizard smmscrpt.dll Insecure Library Loading - SMB-DS Unicode (netbios.rules)
  • 2801493 - ETPRO NETBIOS Microsoft Internet Connection Signup Wizard smmscrpt.dll Insecure Library Loading - SMB-DS ASCII (netbios.rules)
  • 2801494 - ETPRO NETBIOS Microsoft Internet Connection Signup Wizard smmscrpt.dll Insecure Library Loading - SMB Unicode (netbios.rules)
  • 2801495 - ETPRO NETBIOS Microsoft Internet Connection Signup Wizard smmscrpt.dll Insecure Library Loading - SMB ASCII (netbios.rules)
  • 2801496 - ETPRO WEB_CLIENT Microsoft Internet Connection Signup Wizard smmscrpt.dll Insecure Library Loading (web_client.rules)
  • 2801498 - ETPRO NETBIOS Microsoft Windows Media Encoder PRX File msxml.dll Insecure Library Loading - SMB-DS Unicode (netbios.rules)
  • 2801499 - ETPRO NETBIOS Microsoft Windows Media Encoder PRX File msxml.dll Insecure Library Loading - SMB-DS ASCII (netbios.rules)
  • 2801500 - ETPRO NETBIOS Microsoft Windows Media Encoder PRX File msxml.dll Insecure Library Loading - SMB Unicode (netbios.rules)
  • 2801501 - ETPRO NETBIOS Microsoft Windows Media Encoder PRX File msxml.dll Insecure Library Loading - SMB ASCII (netbios.rules)
  • 2801502 - ETPRO WEB_CLIENT Microsoft Windows Media Encoder PRX File msxml.dll Insecure Library Loading (web_client.rules)
  • 2801504 - ETPRO NETBIOS Multiple Load Library Vulns wintab32.dll - SMB-DS ASCII (netbios.rules)
  • 2801505 - ETPRO NETBIOS Multiple Load Library Vulns wintab32.dll - SMB-DS Unicode (netbios.rules)
  • 2801506 - ETPRO NETBIOS Multiple Load Library Vulns wintab32.dll - SMB ASCII (netbios.rules)
  • 2801507 - ETPRO NETBIOS Multiple Load Library Vulns wintab32.dll - SMB Unicode (netbios.rules)
  • 2801508 - ETPRO WEB_CLIENT Multiple Load Library Vulns wintab32.dll Insecure Library Loading (web_client.rules)
  • 2801514 - ETPRO WEB_CLIENT Multiple Load Library Vulns dwmapi.dll Insecure Library Loading (web_client.rules)
  • 2801520 - ETPRO WEB_CLIENT Adobe Illustrator aires.dll Insecure Library Loading (web_client.rules)
  • 2801522 - ETPRO NETBIOS Microsoft Powerpoint pp7x32.dll Insecure Library Loading - SMB-DS Unicode (netbios.rules)
  • 2801523 - ETPRO NETBIOS Microsoft Powerpoint pp7x32.dll Insecure Library Loading - SMB-DS ASCII (netbios.rules)
  • 2801524 - ETPRO NETBIOS Microsoft Powerpoint pp7x32.dll Insecure Library Loading - SMB Unicode (netbios.rules)
  • 2801525 - ETPRO NETBIOS Microsoft Powerpoint pp7x32.dll Insecure Library Loading - SMB ASCII (netbios.rules)
  • 2801526 - ETPRO WEB_CLIENT Microsoft Powerpoint pp7x32.dll Insecure Library Loading (web_client.rules)
  • 2801532 - ETPRO WEB_CLIENT Microsoft Powerpoint pp4x322.dll Insecure Library Loading (web_client.rules)
  • 2801538 - ETPRO WEB_CLIENT Microsoft Powerpoint msapsspc.dll Insecure Library Loading (web_client.rules)
  • 2801544 - ETPRO WEB_CLIENT Microsoft Powerpoint schannel.dll Insecure Library Loading (web_client.rules)
  • 2801546 - ETPRO NETBIOS Microsoft Powerpoint digest.dll Insecure Library Loading - SMB-DS Unicode (netbios.rules)
  • 2801547 - ETPRO NETBIOS Microsoft Powerpoint digest.dll Insecure Library Loading - SMB-DS ASCII (netbios.rules)
  • 2801548 - ETPRO NETBIOS Microsoft Powerpoint digest.dll Insecure Library Loading - SMB Unicode (netbios.rules)
  • 2801549 - ETPRO NETBIOS Microsoft Powerpoint digest.dll Insecure Library Loading - SMB ASCII (netbios.rules)
  • 2801550 - ETPRO WEB_CLIENT Microsoft Powerpoint digest.dll Insecure Library Loading (web_client.rules)
  • 2801552 - ETPRO NETBIOS Microsoft Powerpoint msnsspc.dll Insecure Library - SMB-DS Unicode (netbios.rules)
  • 2801553 - ETPRO NETBIOS Microsoft Powerpoint msnsspc.dll Insecure Library - SMB-DS ASCII (netbios.rules)
  • 2801554 - ETPRO NETBIOS Microsoft Powerpoint msnsspc.dll Insecure Library - SMB Unicode (netbios.rules)
  • 2801555 - ETPRO NETBIOS Microsoft Powerpoint msnsspc.dll Insecure Library - SMB ASCII (netbios.rules)
  • 2801556 - ETPRO WEB_CLIENT Microsoft Powerpoint msnsspc.dll Insecure Library (web_client.rules)
  • 2801568 - ETPRO WEB_CLIENT Microsoft Windows SDK for Windows 7 and NET Framework 4 GraphEdit measure.dll Insecure Library Loading (web_client.rules)
  • 2801574 - ETPRO WEB_CLIENT IBM Lotus Notes nnoteswc.dll Insecure Library Loading (web_client.rules)
  • 2801580 - ETPRO WEB_CLIENT IBM Lotus Notes nlsxbe.dll Insecure Library Loading (web_client.rules)
  • 2801586 - ETPRO WEB_CLIENT Multiple Load Library Vulns ibfs32.dll (web_client.rules)
  • 2801588 - ETPRO NETBIOS Apple QuickTime PictureViewer CoreGraphics.dll Insecure Library Loading - SMB-DS Unicode (netbios.rules)
  • 2801589 - ETPRO NETBIOS Apple QuickTime PictureViewer CoreGraphics.dll Insecure Library Loading - SMB-DS ASCII (netbios.rules)
  • 2801590 - ETPRO NETBIOS Apple QuickTime PictureViewer CoreGraphics.dll Insecure Library Loading - SMB Unicode (netbios.rules)
  • 2801591 - ETPRO NETBIOS Apple QuickTime PictureViewer CoreGraphics.dll Insecure Library Loading - SMB ASCII (netbios.rules)
  • 2801592 - ETPRO WEB_CLIENT Apple QuickTime PictureViewer CoreGraphics.dll Insecure Library Loading (web_client.rules)
  • 2801600 - ETPRO NETBIOS Microsoft Windows Indeo Filter iacenc.dll Insecure Library Loading - SMB-DS Unicode (netbios.rules)
  • 2801601 - ETPRO NETBIOS Microsoft Windows Indeo Filter iacenc.dll Insecure Library Loading - SMB-DS ASCII (netbios.rules)
  • 2801602 - ETPRO NETBIOS Microsoft Windows Indeo Filter iacenc.dll Insecure Library Loading - SMB Unicode (netbios.rules)
  • 2801603 - ETPRO NETBIOS Microsoft Windows Indeo Filter iacenc.dll Insecure Library Loading - SMB ASCII (netbios.rules)
  • 2801604 - ETPRO WEB_CLIENT Microsoft Windows Indeo Filter iacenc.dll Insecure Library Loading (web_client.rules)
  • 2801616 - ETPRO MALWARE Backdoor.Win32.Trup.CX Checkin 2 (malware.rules)
  • 2801628 - ETPRO MALWARE Backdoor.Win32.TBubz.DL Checkin 2 (malware.rules)
  • 2801632 - ETPRO SMTP Multiple Products STARTTLS Plaintext Command Injection (smtp.rules)
  • 2801635 - ETPRO MALWARE Win32/Rimecud.B Checkin (malware.rules)
  • 2801636 - ETPRO MALWARE Backdoor.Win32.TKcik.A Flowbit SET (malware.rules)
  • 2801637 - ETPRO MALWARE Backdoor.Win32.TKcik.A KCICK Flowbit SET 2 (malware.rules)
  • 2801638 - ETPRO MALWARE Backdoor.Win32.TKcik.A Checkin (malware.rules)
  • 2801639 - ETPRO MALWARE Trojan-Downloader.Win32.Vmara.A SQL Checkin (malware.rules)
  • 2801671 - ETPRO MALWARE BestAntivirus Fake AV Download (malware.rules)
  • 2801673 - ETPRO MALWARE Backdoor.Win32.Dtd.A Checkin (malware.rules)
  • 2801674 - ETPRO MALWARE Trojan.Win32.Banker.bhhc Checkin (malware.rules)
  • 2801675 - ETPRO MALWARE Backdoor.Win32.Prioxer.A Checkin (malware.rules)
  • 2801676 - ETPRO MALWARE Trojan.Win32.PKXG.A Checkin (malware.rules)
  • 2801677 - ETPRO MALWARE Trojan.Win32.Delftie.azqn Checkin (malware.rules)
  • 2801678 - ETPRO MALWARE Backdoor.Win32.Nefkyt.A Checkin (malware.rules)
  • 2801680 - ETPRO SCADA DNP3 Disable Unsolicited Responses (scada.rules)
  • 2801683 - ETPRO SCADA DNP3 Cold Restart From Authorized Client (scada.rules)
  • 2801684 - ETPRO SCADA DNP3 Cold Restart From Unauthorized Client (scada.rules)
  • 2801685 - ETPRO SCADA DNP3 Unauthorized Read Request to a PLC (scada.rules)
  • 2801686 - ETPRO SCADA DNP3 Unauthorized Write Request to a PLC (scada.rules)
  • 2801687 - ETPRO SCADA DNP3 Unauthorized Miscellaneous Request to a PLC (scada.rules)
  • 2801688 - ETPRO SCADA DNP3 Stop Application (scada.rules)
  • 2801689 - ETPRO SCADA DNP3 Warm Restart (scada.rules)
  • 2801690 - ETPRO SCADA DNP3 Broadcast Request from Authorized Client (scada.rules)
  • 2801691 - ETPRO SCADA DNP3 Broadcast Request from Unauthorized Client (scada.rules)
  • 2801700 - ETPRO SCADA_SPECIAL DNP3 Unauthorized Write Request to a PLC (scada_special.rules)
  • 2801701 - ETPRO SCADA_SPECIAL DNP3 Unauthorized Miscellaneous Request to a PLC (scada_special.rules)
  • 2801704 - ETPRO SCADA_SPECIAL DNP3 Broadcast Request from Authorized Client (scada_special.rules)
  • 2801705 - ETPRO SCADA_SPECIAL DNP3 Broadcast Request from Unauthorized Client (scada_special.rules)
  • 2801710 - ETPRO SCADA Modbus TCP Force Listen Only Mode (scada.rules)
  • 2801711 - ETPRO SCADA Modbus TCP Restart Communications Option (scada.rules)
  • 2801712 - ETPRO SCADA Modbus TCP Clear Counters and Diagnostic Registers (scada.rules)
  • 2801713 - ETPRO SCADA Modbus TCP Read Device Identification (scada.rules)
  • 2801714 - ETPRO SCADA Modbus TCP Report Server Information (scada.rules)
  • 2801715 - ETPRO SCADA Modbus TCP Unauthorized Read Request to a PLC (scada.rules)
  • 2801716 - ETPRO SCADA Modbus TCP Unauthorized Write Request to a PLC (scada.rules)
  • 2801860 - ETPRO MALWARE Rogue AV AntimalwareDoctor.B Checkin (malware.rules)
  • 2801882 - ETPRO MALWARE Win32.AutoRun.cedq Checkin (malware.rules)
  • 2801914 - ETPRO MALWARE NCom Linux Rootkit Checkin (malware.rules)
  • 2801915 - ETPRO MALWARE Ncom Rootkit Failed Login (malware.rules)
  • 2801916 - ETPRO MALWARE NCom Rootkit Login (Default PW) (malware.rules)
  • 2801924 - ETPRO MALWARE Trojan.Win32.Alipime.DUK Checkin 1 (malware.rules)
  • 2801925 - ETPRO MALWARE Trojan.Win32.Alipime.DUK Checkin 2 (malware.rules)
  • 2801926 - ETPRO MALWARE Trojan.Win32.Bancos.OBQ Checkin 2 (malware.rules)
  • 2801948 - ETPRO MALWARE PC Total Defender or related Fake AV Checkin (malware.rules)
  • 2801955 - ETPRO MALWARE Backdoor.Win32.SlyBot.A Checkin (malware.rules)
  • 2801956 - ETPRO MALWARE Backdoor.Win32.Mooplids.A Checkin (malware.rules)
  • 2801957 - ETPRO MALWARE Backdoor.Win32.Mooplids.A Checkin 2 (malware.rules)
  • 2801958 - ETPRO MALWARE Backdoor.Win32.Sajdela.A Checkin (malware.rules)
  • 2801962 - ETPRO MALWARE Kryptik/CodecPack.amda/TROJ_RENOS.SM3 Checkin (malware.rules)
  • 2801963 - ETPRO MALWARE Backdoor.Win32.ProcSpy.B Checkin (malware.rules)
  • 2801966 - ETPRO MALWARE Trojan.Win32.Agent.btm Checkin (malware.rules)
  • 2801983 - ETPRO MALWARE Known Redirect Cookie to Exploit Pack (malware.rules)
  • 2801996 - ETPRO MALWARE Buzus/Bifrost Checkin Response (malware.rules)
  • 2802002 - ETPRO MALWARE Backdoor.Win32.Refpron.I Checkin flowbit set (malware.rules)
  • 2802003 - ETPRO MALWARE Backdoor.Win32.Refpron.I Checkin (malware.rules)
  • 2802011 - ETPRO MALWARE Trojan.Win32.Fisp.A Chinese Bootkit Checkin 2 (malware.rules)
  • 2802052 - ETPRO MALWARE Backdoor.Win32.WhiteGBlgr.A Checkin (malware.rules)
  • 2802053 - ETPRO MALWARE Trojan.Win32.SharkQWT.A Checkin 1 (malware.rules)
  • 2802054 - ETPRO MALWARE Trojan.Win32.SharkQWT.A Checkin 2 (malware.rules)
  • 2802055 - ETPRO MALWARE Trojan.Win32.SharkQWT.A Checkin 3 (malware.rules)
  • 2802058 - ETPRO MALWARE Win32.AutoRun.cftw Checkin (malware.rules)
  • 2802059 - ETPRO MALWARE Win32.Bankwabfoto.A Checkin (malware.rules)
  • 2802070 - ETPRO MALWARE Backdoor.Win32.Cyspetel.A Checkin (malware.rules)
  • 2802071 - ETPRO MALWARE Win32.SpyCont.A uploading data - CWD command via FTP (malware.rules)
  • 2802086 - ETPRO MALWARE Keylogger Win32.SMTP-Mailer.eqX@aK!Aqep Logging Start Email Sent (malware.rules)
  • 2802094 - ETPRO MALWARE Trojan.Win32.TMaquina.A Checkin (malware.rules)
  • 2802097 - ETPRO MALWARE Trojan.MSIL.Qhost.ajb checkin (malware.rules)
  • 2802099 - ETPRO MALWARE Backdoor.Win32.Rewdulon.A/Win32.Graybird Checkin (malware.rules)
  • 2802101 - ETPRO MALWARE Backdoor.Win32.Bewymbot.A Checkin (malware.rules)
  • 2802111 - ETPRO MALWARE Trojan.Win32.TAvesto.A Checkin (malware.rules)
  • 2802121 - ETPRO WORM Worm.Win32.Cospet.A Checkin (worm.rules)
  • 2802157 - ETPRO MALWARE Vundo/Cryptic/Backdoor.24 Checkin (malware.rules)
  • 2802159 - ETPRO MALWARE Delf/Hupigon/PWS.Banker.54377 Checkin Response from CnC (malware.rules)
  • 2802160 - ETPRO MALWARE Delf/Hupigon/PWS.Banker.54377 Checkin Response from Client (malware.rules)
  • 2802170 - ETPRO MALWARE Backdoor.Win32.Wergimog.A Checkin 2 (malware.rules)
  • 2802172 - ETPRO MALWARE Trojan.Win32.Tspsl.C Checkin (malware.rules)
  • 2802176 - ETPRO NETBIOS WINS Replication 4 byte Read Prior to Buffer Exploit Attempt (netbios.rules)
  • 2802178 - ETPRO MALWARE Trojan.Win32.Banload.BIYB Checkin (malware.rules)
  • 2802182 - ETPRO MALWARE Backdoor.Win32.Prinisakat.A checkin (malware.rules)
  • 2802184 - ETPRO MALWARE Trojan.Win32.Dibhoad.A Activity (malware.rules)
  • 2802200 - ETPRO MALWARE Backdoor.Win32.VB.Alsci Checkin (sending driver info) (malware.rules)
  • 2802207 - ETPRO MALWARE Backdoor.Win32.Jinto.A Checkin (malware.rules)
  • 2802208 - ETPRO MALWARE Backdoor.Win32.Tashxmgr.A Checkin (malware.rules)
  • 2802583 - ETPRO MALWARE Backdoor.Win32.Qakbot.E (Backdoor Communication) (malware.rules)
  • 2802826 - ETPRO MALWARE Trojan.Win32.Chowspy.A Checkin 1 (malware.rules)
  • 2802827 - ETPRO MALWARE Trojan.Win32.Chowspy.A Checkin 2 (malware.rules)
  • 2802829 - ETPRO MALWARE Win32.Fibbit.ax Checkin 2 (malware.rules)
  • 2802831 - ETPRO MALWARE Win32.Vilsel.baqb Checkin (malware.rules)
  • 2802847 - ETPRO MALWARE Trojan.W32.Qakbot Checkin 1 (malware.rules)
  • 2802865 - ETPRO EXPLOIT Crimepack Java exploit attempt(1) (exploit.rules)
  • 2802866 - ETPRO MALWARE Trojan.Win32.Vodvit.A Checkin 1 (malware.rules)
  • 2802867 - ETPRO MALWARE Trojan.Win32.Vodvit.A Checkin 2 (malware.rules)
  • 2802870 - ETPRO MALWARE RogueSoftware.Win32.MacDefender Buy Screen (malware.rules)
  • 2802871 - ETPRO MALWARE RogueSoftware.Win32.WinWebSec Buy Screen (malware.rules)
  • 2802886 - ETPRO MALWARE Trojan.Win32.Dcbavict.A Checkin 2 (malware.rules)
  • 2802887 - ETPRO MALWARE Trojan.Win32.Dcbavict.A Checkin 3 (malware.rules)
  • 2802888 - ETPRO WEB_SPECIFIC_APPS AWStats Totals awstatstotals.php sort Parameter Code Execution (web_specific_apps.rules)
  • 2802898 - ETPRO MALWARE Win32/IRCBrute/Floder.ej Command Report (malware.rules)
  • 2802910 - ETPRO MALWARE Backdoor.Win32.Dorkbot.B Join IRC channel (malware.rules)
  • 2802913 - ETPRO MALWARE Backdoor.Nervos.A Response from Server (malware.rules)
  • 2802915 - ETPRO EXPLOIT Cisco Common Services Devices Center Cross Site Scripting (CVE-2011-0962) (exploit.rules)
  • 2802919 - ETPRO MALWARE Win32.Banker.bkvg Checkin (malware.rules)
  • 2802920 - ETPRO MALWARE Trojan-Downloader.Win32.Lataa.B Checkin (malware.rules)
  • 2802924 - ETPRO MALWARE Win32.Buzus.dxxe Checkin (malware.rules)
  • 2802929 - ETPRO MALWARE RogueSoftware.MacOS.MacProtector.A Checkin 2 (malware.rules)
  • 2802932 - ETPRO MALWARE PSW.Win32.Qbot.aem Checkin (malware.rules)
  • 2802957 - ETPRO MALWARE Trojan.Win32.Carberp.D Checkin 3 (malware.rules)
  • 2802959 - ETPRO MALWARE Win32.Vaubeg.A Checkin (malware.rules)
  • 2802962 - ETPRO MALWARE Win32.Qvod Checkin 2 (malware.rules)
  • 2802964 - ETPRO MALWARE Dropper.Agent.dosf Checkin (malware.rules)
  • 2802966 - ETPRO MALWARE Win32.Banker.IC Checkin (malware.rules)
  • 2802967 - ETPRO MALWARE Backdoor.Win32.Hassar.A Checkin (malware.rules)
  • 2802982 - ETPRO MALWARE Win32.Arsinfoder.A Checkin 1 (malware.rules)
  • 2802983 - ETPRO MALWARE Win32.Arsinfoder.A Checkin 2 (malware.rules)
  • 2802986 - ETPRO MALWARE Win32/Banload.YE Checkin (malware.rules)
  • 2802988 - ETPRO NETBIOS Malformed Distributed File System (DFS) Response Attack (netbios.rules)
  • 2802996 - ETPRO MALWARE Trojan.Win32.Zboter.E Checkin (malware.rules)
  • 2802997 - ETPRO NETBIOS Client GET_DFS_REFERRAL Request Flowbit Set (netbios.rules)
  • 2802999 - ETPRO WEB_CLIENT Adobe Reader language.engtesselate.ln flowbit set (web_client.rules)
  • 2803001 - ETPRO NETBIOS Microsoft SMBv2 0-Length Write Request Parsing Vulnerability Attack (netbios.rules)
  • 2803002 - ETPRO NETBIOS Microsoft SMBv2-DS 0-Length Write Request Parsing Vulnerability Attack (netbios.rules)
  • 2803003 - ETPRO NETBIOS Microsoft SMBv2 Negative EOF Create Response Parsing Vulnerability Attack (netbios.rules)
  • 2803004 - ETPRO NETBIOS Microsoft SMBv2-DS Negative EOF Create Response Parsing Vulnerability Attack (netbios.rules)
  • 2803012 - ETPRO MALWARE PSW.Agent.wve Checkin (malware.rules)
  • 2803015 - ETPRO MALWARE Backdoor.Win32.Briewots.A Checkin (malware.rules)
  • 2803016 - ETPRO MALWARE Gen.Trojan.Heur.MGW@t9!CAPci Checkin (malware.rules)
  • 2803017 - ETPRO MALWARE Backdoor.Win32.Babmote.A Checkin (malware.rules)
  • 2803020 - ETPRO MALWARE Backdoor.Win32.Ferabsa.A Checkin 1 (malware.rules)
  • 2803021 - ETPRO MALWARE Backdoor.Win32.Ferabsa.A Checkin 2 (malware.rules)
  • 2803023 - ETPRO ADWARE_PUP Gabpath.com Toolbar Checkin 2 (adware_pup.rules)
  • 2803045 - ETPRO MALWARE Downloader.ZAccess.ar Checkin (malware.rules)
  • 2803046 - ETPRO MALWARE alzb Checkin (malware.rules)
  • 2803048 - ETPRO MALWARE Win32.Agent.ndau Checkin (malware.rules)
  • 2803051 - ETPRO NETBIOS Microsoft Windows OLE Automation Remote Code Execution SMB-DS Unicode (netbios.rules)
  • 2803052 - ETPRO NETBIOS Microsoft Windows OLE Automation Remote Code Execution SMB-DS ASCII (netbios.rules)
  • 2803060 - ETPRO MALWARE Win32.Coinbit.A Reporting (malware.rules)
  • 2803061 - ETPRO EXPLOIT EMC NetWorker librpc.dll Security Check Bypass 1 (exploit.rules)
  • 2803062 - ETPRO EXPLOIT EMC NetWorker librpc.dll Security Check Bypass 2 (exploit.rules)
  • 2803063 - ETPRO WEB_SPECIFIC_APPS BLOG CMS Input Validation Cross-Site Scripting (web_specific_apps.rules)
  • 2803066 - ETPRO MALWARE Downloader.Win32.VBDetaColt.A Checkin (malware.rules)
  • 2803074 - ETPRO MALWARE Backdoor.Win32.IRCBot.AAQ Checkin (malware.rules)
  • 2803091 - ETPRO MALWARE Backdoor.Win32.Showjiao.A Checkin 1 (malware.rules)
  • 2803092 - ETPRO MALWARE Backdoor.Win32.Showjiao.A Checkin 2 (malware.rules)
  • 2803093 - ETPRO MALWARE Backdoor.Win32.Showjiao.A Checkin 3 (malware.rules)
  • 2803097 - ETPRO MALWARE Win32.Cossta.ntv Checkin (malware.rules)
  • 2803106 - ETPRO DNS ISC BIND RRSIG RRsets Denial of Service TCP 1 (dns.rules)
  • 2803113 - ETPRO MALWARE NSIS.Downloader-QF Checkin (malware.rules)
  • 2803116 - ETPRO MALWARE Buzus.hhhs Checkin (malware.rules)
  • 2803118 - ETPRO MALWARE Pagesinxt Malicious Redirect (malware.rules)
  • 2803132 - ETPRO MALWARE Startpage.A Checkin (malware.rules)
  • 2803140 - ETPRO MALWARE Backdoor.Win32.Quivoe.A Checkin (malware.rules)
  • 2803156 - ETPRO MALWARE Ocibit.A/FakeAlert Checkin 2nd stage (malware.rules)
  • 2803159 - ETPRO MALWARE PWS.Win32/Prast.rts Checkin (malware.rules)
  • 2803175 - ETPRO MALWARE Win32.TRDldr.Sogo Checkin (malware.rules)
  • 2803179 - ETPRO MALWARE Win32.Dusta.br Checkin (malware.rules)
  • 2803182 - ETPRO MALWARE Win32/Sirefef.C Checkin (malware.rules)
  • 2803184 - ETPRO MALWARE Win32.ToolHdnf.A Checkin (malware.rules)
  • 2803193 - ETPRO MALWARE Win32.Agent.grdm Checkin 1 (malware.rules)
  • 2803194 - ETPRO MALWARE Win32.Agent.grdm Checkin 2 (malware.rules)
  • 2803207 - ETPRO MALWARE Win32.Swisyn.aqis Reporting System Info (malware.rules)
  • 2803208 - ETPRO MALWARE Win32/FakeRean Checkin 2 (malware.rules)
  • 2803209 - ETPRO MALWARE Trojan.Win32.Orsam Checkin Flowbit Set (malware.rules)
  • 2803211 - ETPRO ADWARE_PUP AdWare.Win32.AdMedia Checkin (adware_pup.rules)
  • 2803214 - ETPRO MALWARE Win32.Poshtroper.A Checkin (malware.rules)
  • 2803228 - ETPRO CHAT mig33 Server Registered OK (chat.rules)
  • 2803233 - ETPRO MALWARE Variant.Kazy.15105 Checkin (malware.rules)
  • 2803239 - ETPRO MALWARE MimimiBot.f Checkin (malware.rules)
  • 2803245 - ETPRO MALWARE Win32.Geral.rco Checkin (malware.rules)
  • 2803250 - ETPRO MALWARE Variant.TDss.24 Checkin (malware.rules)
  • 2803257 - ETPRO MALWARE Backdoor.Win32.RDPdoor.AE Checkin 2 (malware.rules)
  • 2803258 - ETPRO MALWARE Backdoor.Win32.RDPdoor.AE Checkin 3 (malware.rules)
  • 2803268 - ETPRO MALWARE Dynamer.dtc/Keylog.km0/Uaneskeylogger.pl Keylogger Version Check (malware.rules)
  • 2803280 - ETPRO MALWARE TDSS.xcn Checkin (malware.rules)
  • 2803281 - ETPRO NETBIOS Oracle Java Runtime Environment Insecure File Loading (hotspot_compiler) - SMB-DS ASCII (netbios.rules)
  • 2803282 - ETPRO NETBIOS Oracle Java Runtime Environment Insecure File Loading (hotspot_compiler) - SMB-DS Unicode (netbios.rules)
  • 2803283 - ETPRO NETBIOS Oracle Java Runtime Environment Insecure File Loading (hotspot_compiler) - SMB ASCII (netbios.rules)
  • 2803284 - ETPRO NETBIOS Oracle Java Runtime Environment Insecure File Loading (hotspot_compiler) - SMB Unicode (netbios.rules)
  • 2803285 - ETPRO NETBIOS Oracle Java Runtime Environment Insecure File Loading (hotspotrc) - SMB-DS ASCII (netbios.rules)
  • 2803286 - ETPRO NETBIOS Oracle Java Runtime Environment Insecure File Loading (hotspotrc) - SMB-DS Unicode (netbios.rules)
  • 2803287 - ETPRO NETBIOS Oracle Java Runtime Environment Insecure File Loading (hotspotrc) - SMB Unicode (netbios.rules)
  • 2803288 - ETPRO NETBIOS Oracle Java Runtime Environment Insecure File Loading (hotspotrc) - SMB ASCII (netbios.rules)
  • 2803290 - ETPRO WEB_CLIENT Oracle Java Runtime Environment Insecure File Loading (hotspotrc) (web_client.rules)
  • 2803293 - ETPRO MALWARE Spy.Barely.A Checkin (malware.rules)
  • 2803300 - ETPRO MALWARE Win32.StripDance.b Checkin (malware.rules)
  • 2803301 - ETPRO MALWARE Backdoor.Win32.Quejob.evl Checkin 3 (malware.rules)
  • 2803302 - ETPRO MALWARE VirTool.Win32/DelfInject Checkin (malware.rules)
  • 2803303 - ETPRO MALWARE Win32.Pincav.bgzr Checkin (malware.rules)
  • 2803309 - ETPRO MALWARE Win32.Bancos.QSPN Checkin (malware.rules)
  • 2803326 - ETPRO MALWARE Win32.Autoit.ap Checkin (malware.rules)
  • 2803327 - ETPRO MALWARE Win32/Thutani.A Checkin (malware.rules)
  • 2803331 - ETPRO MALWARE GWorld.512000 Checkin (malware.rules)
  • 2803332 - ETPRO MALWARE Backdoor.Win32.Yayih.A Checkin (malware.rules)
  • 2803365 - ETPRO MALWARE Backdoor.Win32.Idicaf.B Checkin 1 (malware.rules)
  • 2803366 - ETPRO MALWARE Backdoor.Win32.Idicaf.B Checkin 2 (malware.rules)
  • 2803369 - ETPRO MALWARE Downloader.Agent.TF Checkin (malware.rules)
  • 2803375 - ETPRO WEB_SERVER Microsoft Remote Desktop Web Access ReturnUrl XSS Attempt (web_server.rules)
  • 2803376 - ETPRO WEB_SERVER Microsoft .NET Framework ChartControl Information Disclosure Attempt (web_server.rules)
  • 2803377 - ETPRO WEB_SERVER Microsoft Report Viewer control Cross-Site Scripting (web_server.rules)
  • 2803379 - ETPRO MALWARE Sus/VB-CHMB Checkin (malware.rules)
  • 2803381 - ETPRO ADWARE_PUP Adware Win32/EliteBar Checkin (adware_pup.rules)
  • 2803383 - ETPRO MALWARE Win32/Mocmex.gen!A Checkin (malware.rules)
  • 2803389 - ETPRO MALWARE Backdoor.Agent.AAXM Checkin (malware.rules)
  • 2803392 - ETPRO MALWARE Variant.Buzy.641 Checkin 2 (malware.rules)
  • 2803393 - ETPRO MALWARE Variant.Buzy.641 Checkin (malware.rules)
  • 2803394 - ETPRO MALWARE Trojan.Win32.Banker.BXF Checkin (malware.rules)
  • 2803403 - ETPRO WORM Worm.Win32.Autorun.hi Checkin - SET (worm.rules)
  • 2803404 - ETPRO WORM Worm.Win32.Autorun.hi Checkin (worm.rules)
  • 2803407 - ETPRO NETBIOS Microsoft Internet Explorer url.dll Telnet Handler Insecure Exe Loading - SMB ASCII (netbios.rules)
  • 2803408 - ETPRO NETBIOS Microsoft Internet Explorer url.dll Telnet Handler Insecure Exe Loading - SMB-DS ASCII (netbios.rules)
  • 2803409 - ETPRO NETBIOS Microsoft Internet Explorer url.dll Telnet Handler Insecure Exe Loading - SMB Unicode (netbios.rules)
  • 2803410 - ETPRO NETBIOS Microsoft Internet Explorer url.dll Telnet Handler Insecure Exe Loading - SMB-DS Unicode (netbios.rules)
  • 2803420 - ETPRO MALWARE Backdoor.Win32.Msposer.A Checkin (malware.rules)
  • 2803422 - ETPRO WORM Worm.Win32.Ganelp.B Checkin 1 (worm.rules)
  • 2803423 - ETPRO WORM Worm.Win32.Ganelp.B Checkin 2 (worm.rules)
  • 2803426 - ETPRO MALWARE TrojanDownloader.VBS/Badiseso.H Checkin (malware.rules)
  • 2803427 - ETPRO MALWARE Common Trojan Header Pattern Accept with double slash (malware.rules)
  • 2803432 - ETPRO ADWARE_PUP Adware Torangcomz or Related Install Checkin (adware_pup.rules)
  • 2803438 - ETPRO MALWARE Win32.Puprlehzae.A Checkin (malware.rules)
  • 2803441 - ETPRO MALWARE E-Surveiller.com Checkin (malware.rules)
  • 2803447 - ETPRO MALWARE Plusline.co.kr FakeAV Checkin (malware.rules)
  • 2803450 - ETPRO MALWARE Ghost/Win32.Spidern.A Checkin 1 (malware.rules)
  • 2803451 - ETPRO MALWARE Trojan.Win32.Spidern.A Checkin 2 (malware.rules)
  • 2803453 - ETPRO MALWARE PSWTool.Win32.PassView.b FTP Push of User Data Flowbit SET (malware.rules)
  • 2803454 - ETPRO MALWARE PSWTool.Win32.PassView.b FTP Push of User Data (malware.rules)
  • 2803457 - ETPRO MALWARE Trojan.Win32.Zatvex.A Checkin 1 (malware.rules)
  • 2803458 - ETPRO MALWARE Trojan.Win32.Zatvex.A Checkin 2 (malware.rules)
  • 2803459 - ETPRO MALWARE Siscos.btd Checkin (malware.rules)
  • 2803465 - ETPRO MALWARE Backdoor.Win32.Jetilms.A Checkin (malware.rules)
  • 2803478 - ETPRO MALWARE Trojan.Win32.VB.alhq Checkin 1 (malware.rules)
  • 2803479 - ETPRO MALWARE Trojan.Win32.VB.alhq Checkin 2 (malware.rules)
  • 2803480 - ETPRO MALWARE Trojan.Win32.Agent.cve Checkin (malware.rules)
  • 2803484 - ETPRO MALWARE Trojan-Dropper.Win32.Agent.eydk Checkin (malware.rules)
  • 2803487 - ETPRO MALWARE Genome.cnqp Checkin (malware.rules)
  • 2803500 - ETPRO MALWARE Trojan-Dropper.Win32.Mudrop.asj Checkin (malware.rules)
  • 2803501 - ETPRO MALWARE Trojan.Win32.Swisyn.pqr Checkin (malware.rules)
  • 2803504 - ETPRO MALWARE Backdoor.Win32.Agobot.ast Checkin 1 (malware.rules)
  • 2803505 - ETPRO MALWARE Backdoor.Win32.Agobot.ast Checkin 2 (malware.rules)
  • 2803510 - ETPRO MALWARE Win32/Bumat!rts Checkin (malware.rules)
  • 2803512 - ETPRO MALWARE Win32/Agent.QU Checkin (malware.rules)
  • 2803513 - ETPRO MALWARE Win32/VB.AED Checkin off-ports (malware.rules)
  • 2803522 - ETPRO MALWARE Win32.Rorpian Checkin (malware.rules)
  • 2803527 - ETPRO MALWARE Backdoor.Win32.Yunsip.A Checkin 1 (malware.rules)
  • 2803528 - ETPRO MALWARE Backdoor.Win32.Yunsip.A Checkin off-ports (malware.rules)
  • 2803529 - ETPRO WEB_CLIENT Mozilla Firefox and Thunderbird sensor.dll Insecure Library Loading (web_client.rules)
  • 2803537 - ETPRO MALWARE Backdoor.DsBot.dov/Win32.Morto.A Checkin (malware.rules)
  • 2803539 - ETPRO MALWARE Win32/Dumaru@mm Checkin (malware.rules)
  • 2803541 - ETPRO MALWARE Virus.Downloader.Rozena Checkin (malware.rules)
  • 2803544 - ETPRO ADWARE_PUP Adware Bargainbuddy.BD Checkin (adware_pup.rules)
  • 2803555 - ETPRO MALWARE Trojan.Win32.Scar.dhnx Checkin off-ports (malware.rules)
  • 2803556 - ETPRO MALWARE Trojan.Win32.Scar.dhnx Checkin (malware.rules)
  • 2803563 - ETPRO WORM Worm.Win32.Morto.A Propagating via Windows Remote Desktop Protocol Flowbit Set (worm.rules)
  • 2803568 - ETPRO MALWARE Trojan.Win32.Banload.ABY Checkin 1 (malware.rules)
  • 2803571 - ETPRO ADWARE_PUP Adware.Websearch Checkin (adware_pup.rules)
  • 2803583 - ETPRO MALWARE Win32.Sality.At Checkin (malware.rules)
  • 2803589 - ETPRO MALWARE Win32.Banker.FGU Checkin 2 (malware.rules)
  • 2803590 - ETPRO ADWARE_PUP Adware Win32/Webnexus Checkin (adware_pup.rules)
  • 2803595 - ETPRO WEB_SERVER Microsoft Report Viewer control Cross-Site Scripting 2 (web_server.rules)
  • 2803598 - ETPRO ADWARE_PUP Zugo Spyware Related Searchbar Installer (LogiaInstaller) (adware_pup.rules)
  • 2803603 - ETPRO MALWARE Trojan.Win32.Agent.dcir Checkin (malware.rules)
  • 2803609 - ETPRO MALWARE Trojan.Win32.KeyLogger.wav Checkin (malware.rules)
  • 2803614 - ETPRO MALWARE TrojanDropper.Agent.dpah Checkin (malware.rules)
  • 2803623 - ETPRO MALWARE Backdoor.Win32.Doschald.A Checkin (malware.rules)
  • 2803625 - ETPRO EXPLOIT HP SiteScope integrationViewer Default Credentials 1 (exploit.rules)
  • 2803626 - ETPRO EXPLOIT HP SiteScope integrationViewer Default Credentials 2 (exploit.rules)
  • 2803627 - ETPRO EXPLOIT HP SiteScope integrationViewer Default Credentials 3 (exploit.rules)
  • 2803628 - ETPRO EXPLOIT HP SiteScope integrationViewer Default Credentials 4 (exploit.rules)
  • 2803629 - ETPRO EXPLOIT HP SiteScope integrationViewer Default Credentials 5 (exploit.rules)
  • 2803630 - ETPRO EXPLOIT HP SiteScope integrationViewer Default Credentials 6 (exploit.rules)
  • 2803631 - ETPRO MALWARE Win32/Httpbot.A Checkin (malware.rules)
  • 2803632 - ETPRO MALWARE Trojan.Win32.FresctSpy.A Checkin (malware.rules)
  • 2803645 - ETPRO WEB_SERVER Microsoft SharePoint Remote File Disclosure Upload Inbound (web_server.rules)
  • 2803650 - ETPRO ADWARE_PUP Adware Win32/Oneday.B Checkin (adware_pup.rules)
  • 2803651 - ETPRO MALWARE Backdoor.Win32.Dalbot.A Checkin (malware.rules)
  • 2803677 - ETPRO MALWARE Trojan.Win32.Mybios.A Checkin (malware.rules)
  • 2803680 - ETPRO MALWARE Win32.Zapchast.ffs Checkin (malware.rules)
  • 2803689 - ETPRO WEB_SPECIFIC_APPS FortiMail Messaging Security Appliance parameter XSS attempt (web_specific_apps.rules)
  • 2803695 - ETPRO MALWARE Win32.FakeScanti Checkin (malware.rules)
  • 2803701 - ETPRO MALWARE Win32/Hatigh.D Checkin (malware.rules)
  • 2803706 - ETPRO MALWARE BackDoor.DOQ.gen.y Checkin 1 (malware.rules)
  • 2803708 - ETPRO MALWARE BackDoor.DOQ.gen.y Checkin 3 (malware.rules)
  • 2803710 - ETPRO MALWARE Trojan-Downloader.Win32.Diple.A Checkin 2 (malware.rules)
  • 2803711 - ETPRO MALWARE Trojan-Downloader.Win32.Diple.A Checkin 3 (malware.rules)
  • 2803712 - ETPRO MALWARE Backdoor.Win32.Qinubot.A Checkin 1 (malware.rules)
  • 2803713 - ETPRO MALWARE Backdoor.Win32.Qinubot.A Checkin 2 (malware.rules)
  • 2803718 - ETPRO MALWARE Win32/Vundo.B Checkin (malware.rules)
  • 2803719 - ETPRO MALWARE TrojanSpy.Zbot.abrq Checkin (malware.rules)
  • 2803721 - ETPRO MALWARE Trojan/Downloader.Banload.kor Checkin (malware.rules)
  • 2803722 - ETPRO MALWARE Trojan.Heur.VP.qmHfai8YuXnI (malware.rules)
  • 2803733 - ETPRO MALWARE TrojanProxy.Ukstories.e Checkin (malware.rules)
  • 2803741 - ETPRO MALWARE Backdoor.Win32.Dekara.A Checkin (malware.rules)
  • 2803743 - ETPRO MALWARE Trojan.Win32.Buzus.hond Checkin 3 (malware.rules)
  • 2803751 - ETPRO MALWARE Backdoor.Win32.Ramagedos.A Checkin 2 (malware.rules)
  • 2803755 - ETPRO MALWARE Trojan.Win32.Banker.slrj Checkin 2 (malware.rules)
  • 2803758 - ETPRO MALWARE Covert DNS Channel Query (ipcheker .com) (malware.rules)
  • 2803759 - ETPRO MALWARE Covert DNS Channel Query (ipgreat .com) (malware.rules)
  • 2803761 - ETPRO MALWARE Backdoor.Win32.Zapchast.qz Checkin 1 (malware.rules)
  • 2803762 - ETPRO MALWARE Backdoor.Win32.Zapchast.qz Checkin 2 (malware.rules)
  • 2803771 - ETPRO MALWARE Backdoor.MacOS.Imuler.A Checkin 1 (malware.rules)
  • 2803772 - ETPRO MALWARE Backdoor.MacOS.Imuler.A Checkin 2 (malware.rules)
  • 2803781 - ETPRO MALWARE Trojan-Spy.W32/Banker.JGT Checkin - SET (malware.rules)
  • 2803791 - ETPRO MALWARE Win32/Plingky.A Checkin (malware.rules)
  • 2803796 - ETPRO MALWARE Worm.Win32.Ackantta.B via SMTP 1 (malware.rules)
  • 2803798 - ETPRO MALWARE Worm.Win32.Ackantta.B via SMTP 2 (malware.rules)
  • 2803800 - ETPRO MALWARE Worm.Win32.Ackantta.B via SMTP 3 (malware.rules)
  • 2803807 - ETPRO MALWARE Win32/Sefnit.O Checkin (malware.rules)
  • 2803812 - ETPRO MALWARE Win32/Sefnit.K Checkin (malware.rules)
  • 2803813 - ETPRO MALWARE Win32/Rimod Checkin (malware.rules)
  • 2803828 - ETPRO MALWARE Trojan-Banker.Win32.Banbra.alyg Checkin (malware.rules)
  • 2803831 - ETPRO ADWARE_PUP Adware.Win32/Clickspring.C Checkin (adware_pup.rules)
  • 2803834 - ETPRO MALWARE Win32/Isnup.B Checkin (malware.rules)
  • 2803837 - ETPRO MALWARE Win32.Cycbot-MM Checkin 2 (malware.rules)
  • 2803847 - ETPRO WEB_SERVER Microsoft Forefront Unified Access Gateway XSS Attempt (web_server.rules)
  • 2803848 - ETPRO WEB_SERVER Microsoft Forefront Unified Access Gateway XSS Attempt 2 (web_server.rules)
  • 2803849 - ETPRO WEB_SERVER Microsoft Forefront Unified Access Gateway XSS Attempt 3 (web_server.rules)
  • 2803853 - ETPRO WEB_CLIENT Microsoft Internet Explorer remote code execution via option element 2 (web_client.rules)
  • 2803856 - ETPRO MALWARE Trojan.Downloader.JOQI Checkin (malware.rules)
  • 2803857 - ETPRO MALWARE Trojan.Win32.BHO.bn Checkin (malware.rules)
  • 2803860 - ETPRO MALWARE Trojan.Win32.Cossta.pyo Checkin (malware.rules)
  • 2803862 - ETPRO MALWARE Win32/Tiptuf.A Checkin (malware.rules)
  • 2803866 - ETPRO MALWARE Win32/Nosrawec.C Checkin (malware.rules)
  • 2803870 - ETPRO ADWARE_PUP Adware/Win32.Gamevance.hfco Install (adware_pup.rules)
  • 2803875 - ETPRO MALWARE Win32/Agent.KA Checkin (malware.rules)
  • 2803879 - ETPRO MALWARE Trj/CI.A Checkin (malware.rules)
  • 2803884 - ETPRO MALWARE Trojan.Win32.Scar.evwl Checkin (malware.rules)
  • 2803886 - ETPRO MALWARE Win32/Dogrobot.G Checkin (malware.rules)
  • 2803887 - ETPRO MALWARE Win32/Vake.A Checkin (malware.rules)
  • 2803890 - ETPRO MALWARE Win32/Alureon.FL Checkin (malware.rules)
  • 2803891 - ETPRO MALWARE TrojanSpy.Win32/Banker.AAX Checkin (malware.rules)
  • 2803892 - ETPRO ADWARE_PUP AdWare.Win32.Eorezo Install (adware_pup.rules)
  • 2803893 - ETPRO MALWARE Trojan-Downloader.Win32.Bagle.eds Checkin (malware.rules)
  • 2803896 - ETPRO MALWARE TrojanDownloader.Win32/Carberp.A Checkin (malware.rules)
  • 2803899 - ETPRO MALWARE Sasfis/Atraps.AVWU/AMTU.Proxy Contacting CnC via Google Translate (malware.rules)
  • 2803900 - ETPRO MALWARE Sasfis/Atraps.AVWU/AMTU.Proxy Contacting CnC via Googleusercontent Translate (malware.rules)
  • 2803901 - ETPRO MALWARE Sasfis/Atraps.AVWU/AMTU.Proxy Checkin (malware.rules)
  • 2803913 - ETPRO MALWARE Buzus/Graftor Checkin (malware.rules)
  • 2803920 - ETPRO MALWARE Trojan.Heur.DP.2GW.aiZeT.pG Checkin (malware.rules)
  • 2803922 - ETPRO MALWARE Win32/Usteal.A Checkin (malware.rules)
  • 2803927 - ETPRO MALWARE Win32/fkfldwrm.A Checkin (malware.rules)
  • 2803933 - ETPRO MALWARE Scar.evje/Fraudtool.AvSoft DDoS Traffic (Munged UA) Inbound (malware.rules)
  • 2803939 - ETPRO MALWARE Scar.evje/Fraudtool.AvSoft DDoS Traffic (Munged UA) Inbound 2 (malware.rules)
  • 2803940 - ETPRO MALWARE Scar.evje/Fraudtool.AvSoft DDoS Traffic (Munged UA) Outbound 2 (malware.rules)
  • 2803941 - ETPRO MALWARE Win32/Bofang.B Checkin (malware.rules)
  • 2803943 - ETPRO MALWARE Win32/BHO.KG Checkin (malware.rules)
  • 2803946 - ETPRO MALWARE Win32/VBInject.T Checkin (malware.rules)
  • 2803948 - ETPRO MALWARE Win32/Trafog!rts Checkin (malware.rules)
  • 2803950 - ETPRO MALWARE Trojan.Win32.Jorik.IRCbot.ddj Joining IRC channel - SET (malware.rules)
  • 2803951 - ETPRO MALWARE Trojan.Win32.Jorik.IRCbot.ddj Joining IRC channel (malware.rules)
  • 2803957 - ETPRO MALWARE Trojan.Win32.Scar.ekzu Checkin (malware.rules)
  • 2803960 - ETPRO MALWARE Trojan-PWS.Banker6 Checkin (malware.rules)
  • 2803964 - ETPRO SCADA IGSS 8 ODBC Server Multiple Remote Uninitialized Pointer Free DoS - SET (scada.rules)
  • 2803967 - ETPRO MALWARE Win32/VBInject.gen!EP CnC Traffic (malware.rules)
  • 2803973 - ETPRO MALWARE Trojan-Banker.Win32.Banker.blvx Checkin (malware.rules)
  • 2803976 - ETPRO MALWARE Win32/Bafruz.C Checkin (malware.rules)
  • 2803981 - ETPRO MALWARE Win32/Banload.ACI Checkin (malware.rules)
  • 2803984 - ETPRO ADWARE_PUP Adware.SponsorKeyword Install (adware_pup.rules)
  • 2803986 - ETPRO MALWARE Win32/Agent.CS Checkin (malware.rules)
  • 2803988 - ETPRO MALWARE Win32/Toshinc.A Checkin (malware.rules)
  • 2803992 - ETPRO MALWARE Backdoor.Win32/Rbot.gen Joining IRC channel - SET (malware.rules)
  • 2803994 - ETPRO MALWARE Backdoor.Win32/Rbot.gen Joining IRC channel (malware.rules)
  • 2803996 - ETPRO MALWARE Trojan.Win32.Malex!IK Checkin (malware.rules)
  • 2803998 - ETPRO MALWARE Win32/Kryptik.UUO Checkin (malware.rules)
  • 2804000 - ETPRO MALWARE Worm.Win32/Skopvel.gen!A Checkin (malware.rules)
  • 2804001 - ETPRO MALWARE Win32/TrojanDownloader.Delf.QUT Checkin (malware.rules)
  • 2804004 - ETPRO EXPLOIT Cisco Unified Communications Manager Request to sensitive file platformConfig.xml (exploit.rules)
  • 2804005 - ETPRO EXPLOIT Cisco TFTP hardcoded file names Information Leak (exploit.rules)
  • 2804007 - ETPRO MALWARE Trojan.Win32.Sefnit.L Checkin 2 (malware.rules)
  • 2804011 - ETPRO MALWARE Kazy.41153 Checkin (malware.rules)
  • 2804012 - ETPRO MALWARE TrojanDropper.Win32/Dogrobot.E Checkin 1 (malware.rules)
  • 2804013 - ETPRO MALWARE TrojanDropper.Win32/Dogrobot.E Checkin 2 (malware.rules)
  • 2804015 - ETPRO MALWARE HackTool.Win32.Kiser.aqa INSTALL (malware.rules)
  • 2804021 - ETPRO MALWARE Win32/Tibia.AB Checkin (malware.rules)
  • 2804034 - ETPRO MALWARE Win32/Bancos.DV Reporting via SMTP 5 (malware.rules)
  • 2804039 - ETPRO MALWARE Win32/VBInject.CK Checkin (malware.rules)
  • 2804040 - ETPRO MALWARE Trojan-Banker.Win32.Banbra Reporting via SMTP (malware.rules)
  • 2804045 - ETPRO MALWARE Orsam/Backdoor.Demtranc Checkin 2 (malware.rules)
  • 2804046 - ETPRO MALWARE Win32/Kryptik.UOM Checkin (malware.rules)
  • 2804047 - ETPRO MALWARE Win32/Ldpinch Checkin (malware.rules)
  • 2804048 - ETPRO MALWARE Win32/Malushka.A Checkin (malware.rules)
  • 2804052 - ETPRO MALWARE Win32/Kryptik.UOM Checkin (malware.rules)
  • 2804056 - ETPRO MALWARE Win32/Banload.ADT Checkin (malware.rules)
  • 2804062 - ETPRO MALWARE P2P-Worm.Win32.Palevo.dklq CnC - SET (malware.rules)
  • 2804063 - ETPRO MALWARE P2P-Worm.Win32.Palevo.dklq CnC (malware.rules)
  • 2804064 - ETPRO MALWARE P2P-Worm.Win32.Palevo.dklq CnC - UNSET (malware.rules)
  • 2804071 - ETPRO MALWARE Trojan.Win32.StartPage.aqnj Checkin (malware.rules)
  • 2804072 - ETPRO MALWARE Constructor.Win32.Agent.fx CnC Traffic (malware.rules)
  • 2804080 - ETPRO MALWARE Trojan-Dropper.Win32.Injector.uua Checkin (malware.rules)
  • 2804084 - ETPRO MALWARE Win32/Banker.YB Checkin (malware.rules)
  • 2804085 - ETPRO MALWARE Trojan.Win32.Scar.febz Checkin (malware.rules)
  • 2804092 - ETPRO MALWARE Trojan-Banker.Win32.Agent.gbq Checkin (malware.rules)
  • 2804100 - ETPRO MALWARE Trojan.Heur.VP2.nm1@aOacxkoi Checkin (malware.rules)
  • 2804120 - ETPRO MALWARE Banker.Win32.Banker.snph Checkin (malware.rules)
  • 2804126 - ETPRO MALWARE TrojanSpy.Win32/Bancos.ADR Checkin (malware.rules)
  • 2804127 - ETPRO MALWARE Trojan.Autoit.F Checkin (malware.rules)
  • 2804136 - ETPRO NETBIOS peerdist.dll Insecure Library Loading - SMB-DS ASCII (netbios.rules)
  • 2804138 - ETPRO NETBIOS peerdist.dll Insecure Library Loading - SMB ASCII (netbios.rules)
  • 2804162 - ETPRO MALWARE Win32/Spy.Bancos.OBT Checkin (malware.rules)
  • 2804163 - ETPRO MALWARE Win32/Banker.XO Checkin (malware.rules)
  • 2804165 - ETPRO MALWARE Yakes/Cryptor Dropper Checkin to load.php (malware.rules)
  • 2804183 - ETPRO MALWARE Trojan-Downloader.Win32.AutoIt.sp Checkin (malware.rules)
  • 2804185 - ETPRO MALWARE Win32/Dluca.AN Checkin (malware.rules)
  • 2804214 - ETPRO MALWARE Trojan.Win32.Inject.cdbt Checkin (malware.rules)
  • 2804215 - ETPRO MALWARE Trojan.Heur.DP.HGW@aiZGjxg Checkin (malware.rules)
  • 2804221 - ETPRO MALWARE Trojan-Downloader.BAT.Banload.p Checkin (malware.rules)
  • 2804223 - ETPRO MALWARE Win32/Nuwar.gen!lds Checkin (malware.rules)
  • 2804228 - ETPRO MALWARE Trojan-Banker.Win32.Qhost.miq Checkin (malware.rules)
  • 2804229 - ETPRO MALWARE W32.HLLP.Sality Checkin (malware.rules)
  • 2804230 - ETPRO MALWARE TROJ_DLOADE.AGO Checkin (malware.rules)
  • 2804240 - ETPRO MALWARE TrojanDownloader.Win32/Delf.NK (malware.rules)