alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET MALWARE Generic PSW Agent server reply"; flow:established,to_client; http.stat_code; content:"200"; file.data; content:"|0d 0a|[Uptade]|0d 0a|Web="; content:"|0d 0a|[Guncellestirme]|0d 0a|Version="; fast_pattern; within:100; classtype:trojan-activity; sid:2008662; rev:4; metadata:created_at 2010_07_30, confidence Medium, signature_severity Major, updated_at 2024_03_05;)