alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET ADWARE_PUP ASKTOOLBAR.DLL Reporting"; flow:established,to_server; http.method; content:"GET"; nocase; http.uri; content:"/toolbarv/askBarCfg?"; nocase; content:"v="; nocase; content:"e="; nocase; reference:md5,3f6413475b1466964498c8450de4062f; classtype:pup-activity; sid:2012000; rev:5; metadata:created_at 2010_12_07, signature_severity Minor, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2020_08_31;)