alert http $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET DELETED 180solutions Update Engine"; flow:to_server,established; content:"GET"; depth:3; content:"Host|3a|"; within:300; content:".180solutions.com"; within:40; reference:url,www.safer-networking.org/index.php?page=threats&detail=212; classtype:trojan-activity; sid:2000930; rev:10; metadata:created_at 2010_07_30, signature_severity Unknown, updated_at 2019_07_26;)