Rule History

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET ADWARE_PUP W32/Toolbar.WIDGI User-Agent (WidgiToolbar-)"; flow:to_server,established; http.method; content:"POST"; nocase; http.user_agent; content:"WidgiToolbar-"; depth:13; reference:md5,1785f9784cb4e7400ed6f2c8f0e421c2; classtype:pup-activity; sid:2022826; rev:4; metadata:created_at 2016_05_18, confidence High, signature_severity Minor, updated_at 2020_08_31;)