alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET ADWARE_PUP W32/LoudMo.Adware Checkin"; flow:established,to_server; http.uri; content:"/?aff="; http.host; content:"www.gamebound.com"; startswith; reference:url,www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Adware%3AWin32%2FLoudmo; reference:md5,fc06c613e83f0d3271beba4fdcda987f; classtype:pup-activity; sid:2014400; rev:5; metadata:created_at 2012_03_20, signature_severity Minor, updated_at 2020_08_31;)