ET DELETED Suspicious User-Agent (downloader) - Used by Winfixmaster.com Fake Anti-Spyware and Others
Sourceet/open
CreatedJuly 30, 2010
UpdatedJune 23, 2021
Classificationtrojan-activity
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET DELETED Suspicious User-Agent (downloader) - Used by Winfixmaster.com Fake Anti-Spyware and Others"; flow:to_server,established; content:"User-Agent|3a| downloader|0d 0a|"; http_header; threshold:type limit, count 3, seconds 300, track by_src; classtype:trojan-activity; sid:2003546; rev:12; metadata:affected_product Any, attack_target Client_Endpoint, created_at 2010_07_30, deployment Perimeter, signature_severity Major, tag User_Agent, updated_at 2021_06_23;)
Metadata
affected productAny
attack targetClient_Endpoint
created at2010_07_30
deploymentPerimeter
signature severityMajor
tagUser_Agent
updated at2021_06_23
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!