Sourcefire VRT Rules Update

Date: 2012-08-16

This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack for Snort version 2.9.2.3.

The format of the file is:

gid:sid <-> Default rule state <-> Message (rule group)

New Rules:


 * 1:23897 <-> DISABLED <-> FILE-PDF Sending of a PDF with embedded JavaScript - JS string attempt (file-pdf.rules)
 * 1:23902 <-> DISABLED <-> FILE-PDF Adobe Reader Javascript buffer overflow attempt (file-pdf.rules)
 * 1:23898 <-> DISABLED <-> FILE-PDF Adobe Reader collab.collectEmailInfo exploit attempt (file-pdf.rules)
 * 1:23901 <-> DISABLED <-> FILE-PDF Adobe Reader Javascript buffer overflow attempt (file-pdf.rules)
 * 1:23893 <-> ENABLED <-> BOTNET-CNC Win.Trojan.DistTrack command and control traffic (botnet-cnc.rules)
 * 1:23903 <-> ENABLED <-> BLACKLIST User-Agent known malicious user agent - you (blacklist.rules)
 * 1:23894 <-> DISABLED <-> SMTP PHP truncated crypt function attempt (smtp.rules)
 * 1:23900 <-> DISABLED <-> FILE-PDF Adobe Reader Javascript buffer overflow attempt (file-pdf.rules)
 * 1:23896 <-> DISABLED <-> WEB-PHP PHP truncated crypt function attempt (web-php.rules)
 * 1:23895 <-> DISABLED <-> WEB-PHP PHP truncated crypt function attempt (web-php.rules)
 * 1:23899 <-> DISABLED <-> FILE-PDF Adobe Reader Javascript buffer overflow attempt (file-pdf.rules)
 * 1:23904 <-> DISABLED <-> BLACKLIST DNS request for known malware domain publicnews.mooo.com - Backdoor.Briba (blacklist.rules)

Modified Rules:


 * 1:9820 <-> ENABLED <-> WEB-ACTIVEX OWC11.DataSourceControl.11 ActiveX function call access (web-activex.rules)
 * 1:9821 <-> DISABLED <-> WEB-ACTIVEX TriEditDocument.TriEditDocument ActiveX clsid access (web-activex.rules)
 * 1:9793 <-> DISABLED <-> WEB-ACTIVEX Yahoo Messenger YMMAPI.YMailAttach ActiveX clsid access (web-activex.rules)
 * 1:7983 <-> DISABLED <-> WEB-ACTIVEX SuperBuddy Class ActiveX clsid access (web-activex.rules)
 * 1:7429 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Bitmap ActiveX clsid access (web-activex.rules)
 * 1:8843 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DAArray.1 ActiveX clsid access (web-activex.rules)
 * 1:4225 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Repository ActiveX object access (web-activex.rules)
 * 1:7466 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMT DeInterlace Prop Page ActiveX clsid access (web-activex.rules)
 * 1:8804 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DAMontage.1 ActiveX clsid access (web-activex.rules)
 * 1:878 <-> DISABLED <-> WEB-CGI w3tvars.pm access (web-cgi.rules)
 * 1:9812 <-> DISABLED <-> WEB-ACTIVEX Yahoo Messenger YMMAPI.YMailAttach ActiveX function call access (web-activex.rules)
 * 1:943 <-> DISABLED <-> WEB-FRONTPAGE fpsrvadm.exe access (web-frontpage.rules)
 * 1:7922 <-> DISABLED <-> WEB-ACTIVEX DXImageTransform.Microsoft.RevealTrans ActiveX clsid access (web-activex.rules)
 * 1:851 <-> DISABLED <-> WEB-CGI files.pl access (web-cgi.rules)
 * 1:8789 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DAPoint3.1 ActiveX clsid access (web-activex.rules)
 * 1:8043 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Video Effect Class Manager 1 Input ActiveX clsid access (web-activex.rules)
 * 1:879 <-> DISABLED <-> WEB-CGI admin.pl access (web-cgi.rules)
 * 1:8828 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DAColor.1 ActiveX clsid access (web-activex.rules)
 * 1:4182 <-> DISABLED <-> WEB-ACTIVEX Microsoft MSN Chat v4.5, 4.6 ActiveX object access (web-activex.rules)
 * 1:8033 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer QC.MessageMover.1 ActiveX clsid access (web-activex.rules)
 * 1:4208 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer LexRefStEsObject Class ActiveX object access (web-activex.rules)
 * 1:8786 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DASound.1 ActiveX clsid access (web-activex.rules)
 * 1:4207 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Audio Decompressor Control Property Page ActiveX object access (web-activex.rules)
 * 1:5695 <-> DISABLED <-> WEB-IIS web agent redirect overflow attempt (web-iis.rules)
 * 1:8478 <-> ENABLED <-> FILE-IDENTIFY Microsoft Office Publisher file magic detected (file-identify.rules)
 * 1:7930 <-> DISABLED <-> WEB-ACTIVEX FolderItem2 ActiveX clsid access (web-activex.rules)
 * 1:6686 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DXImageTransform.Microsoft.MMSpecialEffect2Inputs ActiveX clsid access (web-activex.rules)
 * 1:7863 <-> DISABLED <-> WEB-ACTIVEX Mcafee Security Center McSubMgr.IsOldAppInstalled ActiveX function call access (web-activex.rules)
 * 1:960 <-> DISABLED <-> WEB-FRONTPAGE service.stp access (web-frontpage.rules)
 * 1:864 <-> DISABLED <-> WEB-CGI day5datanotifier.cgi access (web-cgi.rules)
 * 1:9631 <-> DISABLED <-> WEB-ACTIVEX Citrix.ICAClient ActiveX function call access (web-activex.rules)
 * 1:7187 <-> DISABLED <-> SPYWARE-PUT Trackware shopathome user-agent detected (spyware-put.rules)
 * 1:898 <-> DISABLED <-> WEB-CGI commerce.cgi access (web-cgi.rules)
 * 1:4191 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows MsnPUpld ActiveX object access (web-activex.rules)
 * 1:961 <-> DISABLED <-> WEB-FRONTPAGE services.cnf access (web-frontpage.rules)
 * 1:7439 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer HTML Help ActiveX clsid access (web-activex.rules)
 * 1:4895 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer PSTypeInfo ActiveX object access (web-activex.rules)
 * 1:836 <-> DISABLED <-> WEB-CGI textcounter.pl access (web-cgi.rules)
 * 1:949 <-> DISABLED <-> WEB-FRONTPAGE registrations.htm access (web-frontpage.rules)
 * 1:975 <-> DISABLED <-> WEB-IIS Alternate Data streams ASP file access attempt (web-iis.rules)
 * 1:7454 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Wmm2ae.dll ActiveX clsid access (web-activex.rules)
 * 1:8379 <-> DISABLED <-> WEB-ACTIVEX Xml2Dex ActiveX clsid access (web-activex.rules)
 * 1:9427 <-> DISABLED <-> WEB-ACTIVEX Acer LunchApp.APlunch ActiveX clsid access (web-activex.rules)
 * 1:7904 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer CDL Asychronous Pluggable Protocol Handler ActiveX clsid access (web-activex.rules)
 * 1:946 <-> DISABLED <-> WEB-FRONTPAGE fpadmcgi.exe access (web-frontpage.rules)
 * 1:7446 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Record Queue ActiveX clsid access (web-activex.rules)
 * 1:7569 <-> DISABLED <-> SPYWARE-PUT Adware lordofsearch runtime detection (spyware-put.rules)
 * 1:875 <-> DISABLED <-> WEB-CGI win-c-sample.exe access (web-cgi.rules)
 * 1:7936 <-> DISABLED <-> WEB-ACTIVEX DXImageTransform.Microsoft.Glow ActiveX clsid access (web-activex.rules)
 * 1:7022 <-> DISABLED <-> WEB-CLIENT Microsoft Windows Explorer invalid url file overflow attempt (web-client.rules)
 * 1:846 <-> DISABLED <-> WEB-CGI bnbform.cgi access (web-cgi.rules)
 * 1:7882 <-> DISABLED <-> WEB-ACTIVEX AccSync.AccSubNotHandler ActiveX clsid access (web-activex.rules)
 * 1:4189 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Third-Party Plugin ActiveX object access (web-activex.rules)
 * 1:5712 <-> DISABLED <-> WEB-CLIENT Microsoft Windows Media Player invalid data offset bitmap heap overflow attempt (web-client.rules)
 * 1:945 <-> DISABLED <-> WEB-FRONTPAGE fpadmin.htm access (web-frontpage.rules)
 * 1:7989 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WIA FileSystem USD ActiveX clsid access (web-activex.rules)
 * 1:7978 <-> DISABLED <-> WEB-ACTIVEX ShockwaveFlash.ShockwaveFlash ActiveX clsid access (web-activex.rules)
 * 1:903 <-> DISABLED <-> WEB-COLDFUSION cfcache.map access (web-coldfusion.rules)
 * 1:4915 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Shortcut Handler ActiveX object access (web-activex.rules)
 * 1:858 <-> DISABLED <-> WEB-CGI filemail access (web-cgi.rules)
 * 1:8762 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.Sequence ActiveX clsid access (web-activex.rules)
 * 1:4228 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Start Menu ActiveX object access (web-activex.rules)
 * 1:8051 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WDM Instance Provider ActiveX clsid access (web-activex.rules)
 * 1:834 <-> DISABLED <-> WEB-CGI rwwwshell.pl access (web-cgi.rules)
 * 1:7050 <-> DISABLED <-> PUA-TOOLBARS Hijacker freecruise toolbar runtime detection (pua-toolbars.rules)
 * 1:8017 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer ICM Class Manager ActiveX clsid access (web-activex.rules)
 * 1:7896 <-> DISABLED <-> WEB-ACTIVEX AOL.PicEditCtrl ActiveX clsid access (web-activex.rules)
 * 1:840 <-> DISABLED <-> WEB-CGI perlshop.cgi access (web-cgi.rules)
 * 1:4210 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Msb1geen.dll ActiveX object access (web-activex.rules)
 * 1:7924 <-> DISABLED <-> WEB-ACTIVEX DXImageTransform.Microsoft.Shadow ActiveX clsid access (web-activex.rules)
 * 1:5785 <-> DISABLED <-> SPYWARE-PUT Adware hithopper runtime detection - get xml setting (spyware-put.rules)
 * 1:7934 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer ftp Asychronous Pluggable Protocol Handler ActiveX clsid access (web-activex.rules)
 * 1:4177 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office 2000 and 2002 Web Components Spreadsheet ActiveX clsid access (web-activex.rules)
 * 1:8801 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DANumber.1 ActiveX clsid access (web-activex.rules)
 * 1:7938 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer gopher Asychronous Pluggable Protocol Handler ActiveX clsid access (web-activex.rules)
 * 1:7480 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMT Log Filter ActiveX clsid access (web-activex.rules)
 * 1:872 <-> DISABLED <-> WEB-CGI tcsh access (web-cgi.rules)
 * 1:7956 <-> DISABLED <-> WEB-ACTIVEX Microsoft Forms 2.0 ListBox ActiveX clsid access (web-activex.rules)
 * 1:4904 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Repository Alias ActiveX object access (web-activex.rules)
 * 1:4175 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office 2000/2002 Web Components PivotTable ActiveX object access (web-activex.rules)
 * 1:838 <-> DISABLED <-> WEB-CGI webgais access (web-cgi.rules)
 * 1:8422 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office Outlook View OVCtl ActiveX clsid access (web-activex.rules)
 * 1:7918 <-> DISABLED <-> WEB-ACTIVEX CoAxTrackVideo Class ActiveX clsid access (web-activex.rules)
 * 1:4216 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer CLSID_CComAcctImport ActiveX object access (web-activex.rules)
 * 1:829 <-> DISABLED <-> WEB-CGI nph-test-cgi access (web-cgi.rules)
 * 1:4903 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer VMR ImageSync 9 ActiveX object access (web-activex.rules)
 * 1:4235 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Helper Object for Java ActiveX object access (web-activex.rules)
 * 1:883 <-> DISABLED <-> WEB-CGI flexform access (web-cgi.rules)
 * 1:4209 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer LexRefStFrObject Class ActiveX object access (web-activex.rules)
 * 1:7914 <-> DISABLED <-> WEB-ACTIVEX DXImageTransform.Microsoft.NDFXArtEffects ActiveX clsid access (web-activex.rules)
 * 1:4217 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office Services on the Web Free/Busy ActiveX object access (web-activex.rules)
 * 1:8009 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer English_UK Stemmer ActiveX clsid access (web-activex.rules)
 * 1:7476 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMT Import Filter ActiveX clsid access (web-activex.rules)
 * 1:951 <-> DISABLED <-> WEB-FRONTPAGE authors.pwd access (web-frontpage.rules)
 * 1:860 <-> DISABLED <-> WEB-CGI snork.bat access (web-cgi.rules)
 * 1:4181 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Smartcard Enrollment ActiveX object access (web-activex.rules)
 * 1:7944 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer https Asychronous Pluggable Protocol Handler ActiveX clsid access (web-activex.rules)
 * 1:8401 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Media Services DRM Storage ActiveX clsid access (web-activex.rules)
 * 1:844 <-> DISABLED <-> WEB-CGI args.bat access (web-cgi.rules)
 * 1:4648 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer wang image admin activex object access (web-activex.rules)
 * 1:8819 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DAImage.1 ActiveX clsid access (web-activex.rules)
 * 1:7868 <-> DISABLED <-> WEB-ACTIVEX ADODB.Recordset ActiveX clsid access (web-activex.rules)
 * 1:7474 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMT FormatConversion ActiveX clsid access (web-activex.rules)
 * 1:7460 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMT Audio Analyzer ActiveX clsid access (web-activex.rules)
 * 1:4206 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer MPEG-4 Video Decompressor Property Page ActiveX object access (web-activex.rules)
 * 1:8377 <-> DISABLED <-> WEB-ACTIVEX RealNetworks RealPlayer Download Handler ActiveX clsid access (web-activex.rules)
 * 1:896 <-> DISABLED <-> WEB-CGI way-board access (web-cgi.rules)
 * 1:850 <-> DISABLED <-> WEB-CGI wais.pl access (web-cgi.rules)
 * 1:7997 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer CLSID_ApprenticeICW ActiveX clsid access (web-activex.rules)
 * 1:4190 <-> DISABLED <-> WEB-ACTIVEX Kodak Thumbnail Image ActiveX object access (web-activex.rules)
 * 1:9668 <-> DISABLED <-> WEB-ACTIVEX Outlook Recipient Control ActiveX clsid access (web-activex.rules)
 * 1:4227 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Network Connections ActiveX object access (web-activex.rules)
 * 1:7458 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Wmm2fxb.dll ActiveX clsid access (web-activex.rules)
 * 1:4185 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Terminal Services Advanced Client ActiveX object access (web-activex.rules)
 * 1:8723 <-> ENABLED <-> WEB-ACTIVEX Microsoft Office Data Source Control 11.0 ActiveX clsid access (web-activex.rules)
 * 1:4201 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Queued Components Recorder ActiveX object access (web-activex.rules)
 * 1:937 <-> DISABLED <-> WEB-FRONTPAGE _vti_rpc access (web-frontpage.rules)
 * 1:7946 <-> DISABLED <-> WEB-ACTIVEX DXImageTransform.Microsoft.MaskFilter ActiveX clsid access (web-activex.rules)
 * 1:825 <-> DISABLED <-> WEB-CGI glimpse access (web-cgi.rules)
 * 1:925 <-> DISABLED <-> WEB-COLDFUSION mainframeset access (web-coldfusion.rules)
 * 1:4897 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer PSOAInterface ActiveX object access (web-activex.rules)
 * 1:7870 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office Data Source Control 9.0 ActiveX clsid access (web-activex.rules)
 * 1:7958 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer mk Asychronous Pluggable Protocol Handler ActiveX clsid access (web-activex.rules)
 * 1:4890 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer IAVIStream & IAVIFile Proxy ActiveX object access (web-activex.rules)
 * 1:8011 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer English_US Stemmer ActiveX clsid access (web-activex.rules)
 * 1:4214 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer TipGW Init ActiveX object access (web-activex.rules)
 * 1:6396 <-> DISABLED <-> BACKDOOR a-311 death user-agent string detected (backdoor.rules)
 * 1:7431 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectFrame.DirectControl.1 ActiveX clsid access (web-activex.rules)
 * 1:8753 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer LM.AutoEffectBvr.1 ActiveX clsid access (web-activex.rules)
 * 1:7932 <-> DISABLED <-> WEB-ACTIVEX FolderItems3 ActiveX clsid access (web-activex.rules)
 * 1:4221 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer ProxyStub Dispatch ActiveX object access (web-activex.rules)
 * 1:8852 <-> DISABLED <-> WEB-ACTIVEX Microsoft Agent v2.0 ActiveX clsid access (web-activex.rules)
 * 1:7839 <-> DISABLED <-> PUA-TOOLBARS Hijacker rx toolbar runtime detection (pua-toolbars.rules)
 * 1:826 <-> DISABLED <-> WEB-CGI htmlscript access (web-cgi.rules)
 * 1:954 <-> DISABLED <-> WEB-FRONTPAGE form_results.htm access (web-frontpage.rules)
 * 1:4905 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Repository Object ActiveX object access (web-activex.rules)
 * 1:823 <-> DISABLED <-> WEB-CGI cvsweb.cgi access (web-cgi.rules)
 * 1:9629 <-> DISABLED <-> WEB-ACTIVEX Citrix.ICAClient ActiveX clsid access (web-activex.rules)
 * 1:7444 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Mmedia.AsyncMHandler.1 ActiveX clsid access (web-activex.rules)
 * 1:865 <-> DISABLED <-> WEB-CGI ksh access (web-cgi.rules)
 * 1:4223 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer OpenCable Class ActiveX object access (web-activex.rules)
 * 1:910 <-> DISABLED <-> WEB-COLDFUSION fileexists.cfm access (web-coldfusion.rules)
 * 1:8834 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DABoolean.1 ActiveX clsid access (web-activex.rules)
 * 1:8007 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Dutch_Dutch Stemmer ActiveX clsid access (web-activex.rules)
 * 1:4172 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Agent v1.5 ActiveX clsid access (web-activex.rules)
 * 1:8735 <-> DISABLED <-> WEB-ACTIVEX BOWebAgent.Webagent.1 ActiveX clsid access (web-activex.rules)
 * 1:8369 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMIScriptUtils.WMIObjectBroker2.1 ActiveX clsid access (web-activex.rules)
 * 1:7993 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer clbcatex.dll ActiveX clsid access (web-activex.rules)
 * 1:936 <-> DISABLED <-> WEB-COLDFUSION gettempdirectory.cfm access  (web-coldfusion.rules)
 * 1:4197 <-> DISABLED <-> WEB-ACTIVEX DigWebX MSN ActiveX object access (web-activex.rules)
 * 1:8405 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer ActiveX clsid access (web-activex.rules)
 * 1:8756 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.SpriteControl ActiveX clsid access (web-activex.rules)
 * 1:843 <-> DISABLED <-> WEB-CGI anform2 access (web-cgi.rules)
 * 1:7894 <-> DISABLED <-> WEB-ACTIVEX AOL.PicDownloadCtrl ActiveX clsid access (web-activex.rules)
 * 1:968 <-> DISABLED <-> WEB-FRONTPAGE register.htm access (web-frontpage.rules)
 * 1:4204 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DT PolyLine Control 2 ActiveX object access (web-activex.rules)
 * 1:7948 <-> DISABLED <-> WEB-ACTIVEX Microsoft Common Browser Architecture ActiveX clsid access (web-activex.rules)
 * 1:7442 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer mmAEPlugIn.AEPlugIn.1 ActiveX clsid access (web-activex.rules)
 * 1:8391 <-> DISABLED <-> WEB-ACTIVEX RFXInstMgr Class ActiveX clsid access (web-activex.rules)
 * 1:8031 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Mslablti.MarshalableTI.1 ActiveX clsid access (web-activex.rules)
 * 1:4911 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Repository Type Library ActiveX object access (web-activex.rules)
 * 1:955 <-> DISABLED <-> WEB-FRONTPAGE access.cnf access (web-frontpage.rules)
 * 1:871 <-> DISABLED <-> WEB-CGI survey.cgi access (web-cgi.rules)
 * 1:4212 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DDS Generic Class ActiveX object access (web-activex.rules)
 * 1:5930 <-> ENABLED <-> SPYWARE-PUT Adware cashbar runtime detection - pop-up ad 2 (spyware-put.rules)
 * 1:8798 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DAPair.1 ActiveX clsid access (web-activex.rules)
 * 1:837 <-> DISABLED <-> WEB-CGI uploader.exe access (web-cgi.rules)
 * 1:8727 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer XMLHTTP 4.0 ActiveX clsid access (web-activex.rules)
 * 1:7950 <-> DISABLED <-> WEB-ACTIVEX Microsoft DirectAnimation Control ActiveX clsid access (web-activex.rules)
 * 1:7478 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMT Interlacer ActiveX clsid access (web-activex.rules)
 * 1:839 <-> DISABLED <-> WEB-CGI finger access (web-cgi.rules)
 * 1:7427 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Allocator Fix ActiveX clsid access (web-activex.rules)
 * 1:8403 <-> DISABLED <-> WEB-ACTIVEX XML Schema Cache 6.0 ActiveX clsid access (web-activex.rules)
 * 1:7876 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office Data Source Control 10.0 ActiveX clsid access (web-activex.rules)
 * 1:8759 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.SequencerControl ActiveX clsid access (web-activex.rules)
 * 1:7486 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMT Screen Capture Filter Task Page ActiveX clsid access (web-activex.rules)
 * 1:4173 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows MsnPUpld ActiveX object access (web-activex.rules)
 * 1:880 <-> DISABLED <-> WEB-CGI LWGate access (web-cgi.rules)
 * 1:4222 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Outllib.dll ActiveX object access (web-activex.rules)
 * 1:958 <-> DISABLED <-> WEB-FRONTPAGE service.cnf access (web-frontpage.rules)
 * 1:8015 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer German_German Stemmer ActiveX clsid access (web-activex.rules)
 * 1:7908 <-> DISABLED <-> WEB-ACTIVEX DXImageTransform.Microsoft.Chroma ActiveX clsid access (web-activex.rules)
 * 1:911 <-> DISABLED <-> WEB-COLDFUSION exprcalc access (web-coldfusion.rules)
 * 1:8001 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer CommunicationManager ActiveX clsid access (web-activex.rules)
 * 1:5914 <-> DISABLED <-> PUA-TOOLBARS Hijacker locatorstoolbar runtime detection - configuration download (pua-toolbars.rules)
 * 1:7502 <-> DISABLED <-> WEB-ACTIVEX tsuserex.ADsTSUserEx.1 ActiveX clsid access (web-activex.rules)
 * 1:6502 <-> DISABLED <-> WEB-CLIENT Mozilla GIF single packet heap overflow - ANIMEXTS1.0 (web-client.rules)
 * 1:4899 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer ISupportErrorInfo Interface ActiveX object access (web-activex.rules)
 * 1:7985 <-> ENABLED <-> WEB-ACTIVEX Microsoft Windows Explorer WebViewFolderIcon.WebViewFolderIcon.1 ActiveX clsid access (web-activex.rules)
 * 1:808 <-> DISABLED <-> WEB-CGI webdriver access (web-cgi.rules)
 * 1:894 <-> DISABLED <-> WEB-CGI bb-hist.sh access (web-cgi.rules)
 * 1:819 <-> DISABLED <-> WEB-CGI mmstdod.cgi access (web-cgi.rules)
 * 1:950 <-> DISABLED <-> WEB-FRONTPAGE cfgwiz.exe access (web-frontpage.rules)
 * 1:8064 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Scriptlet.Typelib ActiveX clsid access (web-activex.rules)
 * 1:962 <-> DISABLED <-> WEB-FRONTPAGE shtml.exe access (web-frontpage.rules)
 * 1:963 <-> DISABLED <-> WEB-FRONTPAGE svcacl.cnf access (web-frontpage.rules)
 * 1:7916 <-> DISABLED <-> WEB-ACTIVEX CLSID_IMimeInternational ActiveX clsid access (web-activex.rules)
 * 1:8768 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DAVector3.1 ActiveX clsid access (web-activex.rules)
 * 1:952 <-> DISABLED <-> WEB-FRONTPAGE author.exe access (web-frontpage.rules)
 * 1:861 <-> DISABLED <-> WEB-CGI w3-msql access (web-cgi.rules)
 * 1:8027 <-> DISABLED <-> WEB-ACTIVEX Microsoft WBEM Event Subsystem ActiveX clsid access (web-activex.rules)
 * 1:7991 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer ACM Class Manager ActiveX clsid access (web-activex.rules)
 * 1:4902 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Video Mixing Renderer 9 ActiveX object access (web-activex.rules)
 * 1:856 <-> DISABLED <-> WEB-CGI environ.cgi access (web-cgi.rules)
 * 1:7437 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Frame Eater ActiveX clsid access (web-activex.rules)
 * 1:835 <-> DISABLED <-> WEB-CGI test-cgi access (web-cgi.rules)
 * 1:8414 <-> DISABLED <-> FILE-OFFICE Microsoft Office GIF image descriptor memory corruption attempt (file-office.rules)
 * 1:8780 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DATransform2.1 ActiveX clsid access (web-activex.rules)
 * 1:854 <-> DISABLED <-> WEB-CGI classifieds.cgi access (web-cgi.rules)
 * 1:842 <-> DISABLED <-> WEB-CGI aglimpse access (web-cgi.rules)
 * 1:967 <-> DISABLED <-> WEB-FRONTPAGE dvwssr.dll access (web-frontpage.rules)
 * 1:6003 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DT DDS Rectilinear GDD Route ActiveX object access (web-activex.rules)
 * 1:4171 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Registration Wizard ActiveX object access (web-activex.rules)
 * 1:4910 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Repository Relationship Definition ActiveX object access (web-activex.rules)
 * 1:8069 <-> DISABLED <-> WEB-ACTIVEX Microsoft Virtual Machine ActiveX clsid access (web-activex.rules)
 * 1:7928 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer file or local Asychronous Pluggable Protocol Handler ActiveX clsid access (web-activex.rules)
 * 1:4170 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office 2000 and 2002 Web Components Data Source Control ActiveX clsid access (web-activex.rules)
 * 1:4174 <-> DISABLED <-> WEB-ACTIVEX Symantec RuFSI registry Information Class ActiveX object access (web-activex.rules)
 * 1:8831 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DACamera.1 ActiveX clsid access (web-activex.rules)
 * 1:7862 <-> DISABLED <-> WEB-ACTIVEX Mcafee Security Center McSubMgr.IsAppExpired ActiveX function call access (web-activex.rules)
 * 1:9671 <-> DISABLED <-> WEB-ACTIVEX RealNetworks RealPlayer AutoStream.AutoStream.1 ActiveX clsid access (web-activex.rules)
 * 1:5905 <-> ENABLED <-> SPYWARE-PUT Adware download accelerator plus runtime detection - games center request (spyware-put.rules)
 * 1:4233 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Visual Database Tools Query Designer v7.0 ActiveX object access (web-activex.rules)
 * 1:833 <-> DISABLED <-> WEB-CGI rguest.exe access (web-cgi.rules)
 * 1:4211 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DDS Library Shape Control ActiveX object access (web-activex.rules)
 * 1:8035 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Spanish_Modern Stemmer ActiveX clsid access (web-activex.rules)
 * 1:9131 <-> DISABLED <-> WEB-ACTIVEX WinZip FileView 6.1 ActiveX function call access (web-activex.rules)
 * 1:7452 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WM Color Converter Filter ActiveX clsid access (web-activex.rules)
 * 1:7864 <-> DISABLED <-> WEB-ACTIVEX McSubMgr ActiveX CLSID access (web-activex.rules)
 * 1:859 <-> DISABLED <-> WEB-CGI man.sh access (web-cgi.rules)
 * 1:7866 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows ADODB.Connection ActiveX clsid access (web-activex.rules)
 * 1:8813 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DALineStyle.1 ActiveX clsid access (web-activex.rules)
 * 1:6002 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DT DDS Rectilinear GDD Layout ActiveX object access (web-activex.rules)
 * 1:4213 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DDS Picture Shape Control ActiveX object access (web-activex.rules)
 * 1:8039 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer syncui.dll ActiveX clsid access (web-activex.rules)
 * 1:8409 <-> DISABLED <-> WEB-ACTIVEX RealNetworks RealPlayer Stream Handler ActiveX clsid access (web-activex.rules)
 * 1:863 <-> DISABLED <-> WEB-CGI day5datacopier.cgi access (web-cgi.rules)
 * 1:915 <-> DISABLED <-> WEB-COLDFUSION evaluate.cfm access (web-coldfusion.rules)
 * 1:882 <-> DISABLED <-> WEB-CGI calendar access (web-cgi.rules)
 * 1:8493 <-> DISABLED <-> WEB-COLDFUSION sourcewindow.cfm access (web-coldfusion.rules)
 * 1:931 <-> DISABLED <-> WEB-COLDFUSION cfmlsyntaxcheck.cfm access (web-coldfusion.rules)
 * 1:4220 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Network and Dial-Up Connections ActiveX object access (web-activex.rules)
 * 1:7834 <-> DISABLED <-> SPYWARE-PUT Hacker-Tool nettracker runtime detection - report browsing (spyware-put.rules)
 * 1:8375 <-> DISABLED <-> WEB-ACTIVEX QuickTime Object ActiveX clsid access (web-activex.rules)
 * 1:4892 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer MTSEvents Class ActiveX object access (web-activex.rules)
 * 1:8389 <-> DISABLED <-> WEB-ACTIVEX RealNetworks RealPlayer RMP Download Handler ActiveX clsid access (web-activex.rules)
 * 1:7482 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMT MuxDeMux Filter ActiveX clsid access (web-activex.rules)
 * 1:7970 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer PostBootReminder object ActiveX clsid access (web-activex.rules)
 * 1:4180 <-> DISABLED <-> WEB-ACTIVEX Kodak Image Scan Control ActiveX object access (web-activex.rules)
 * 1:8029 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer MidiOut Class Manager ActiveX clsid access (web-activex.rules)
 * 1:8822 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DAGeometry.1 ActiveX clsid access (web-activex.rules)
 * 1:8721 <-> DISABLED <-> WEB-ACTIVEX Outlook Data Object ActiveX clsid access (web-activex.rules)
 * 1:7435 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Dynamic Casts ActiveX clsid access (web-activex.rules)
 * 1:8777 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DATransform3.1 ActiveX clsid access (web-activex.rules)
 * 1:8381 <-> DISABLED <-> WEB-ACTIVEX RealNetworks RealPlayer SMIL Download Handler ActiveX clsid access (web-activex.rules)
 * 1:8005 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DiskManagement.Connection ActiveX clsid access (web-activex.rules)
 * 1:8810 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DAMatte.1 ActiveX clsid access (web-activex.rules)
 * 1:4203 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Marquee Control ActiveX object access (web-activex.rules)
 * 1:4914 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Repository Script Definition ActiveX object access (web-activex.rules)
 * 1:5797 <-> DISABLED <-> POLICY Kontiki runtime detection (policy.rules)
 * 1:7886 <-> DISABLED <-> WEB-ACTIVEX AolCalSvr.ACDictionary ActiveX clsid access (web-activex.rules)
 * 1:4224 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer VideoPort ActiveX object access (web-activex.rules)
 * 1:4907 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Repository Collection Definition ActiveX object access (web-activex.rules)
 * 1:8719 <-> DISABLED <-> WEB-ACTIVEX VisualStudio.DTE.8.0 ActiveX clsid access (web-activex.rules)
 * 1:7898 <-> DISABLED <-> WEB-ACTIVEX AOL.PicSsvrCtrl ActiveX clsid access (web-activex.rules)
 * 1:8846 <-> DISABLED <-> WEB-ACTIVEX Microsoft Agent Character Custom Proxy Class ActiveX clsid access (web-activex.rules)
 * 1:8373 <-> DISABLED <-> WEB-ACTIVEX VsmIDE.DTE ActiveX clsid access (web-activex.rules)
 * 1:4219 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Network Connections Tray ActiveX object access (web-activex.rules)
 * 1:913 <-> DISABLED <-> WEB-COLDFUSION cfappman access (web-coldfusion.rules)
 * 1:7456 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Wmm2fxa.dll ActiveX clsid access (web-activex.rules)
 * 1:922 <-> DISABLED <-> WEB-COLDFUSION displayfile access (web-coldfusion.rules)
 * 1:7872 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office Spreadsheet 10.0 ActiveX clsid access (web-activex.rules)
 * 1:7976 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer ShellFolder for CD Burning ActiveX clsid access (web-activex.rules)
 * 1:953 <-> DISABLED <-> WEB-FRONTPAGE administrators.pwd access (web-frontpage.rules)
 * 1:7912 <-> DISABLED <-> WEB-ACTIVEX DX3DTransform.Microsoft.Shapes ActiveX clsid access (web-activex.rules)
 * 1:889 <-> DISABLED <-> WEB-CGI ppdscgi.exe access (web-cgi.rules)
 * 1:8041 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer VFW Capture Class Manager ActiveX clsid access (web-activex.rules)
 * 1:930 <-> DISABLED <-> WEB-COLDFUSION snippets attempt (web-coldfusion.rules)
 * 1:6007 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DT DDS OrgChart GDD Layout ActiveX object access (web-activex.rules)
 * 1:6008 <-> DISABLED <-> WEB-ACTIVEX Microsoft DT DDS OrgChart GDD Route ActiveX object access (web-activex.rules)
 * 1:821 <-> DISABLED <-> WEB-CGI imagemap.exe overflow attempt (web-cgi.rules)
 * 1:4178 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office 2000 and 2002 Web Components Record Navigation Control ActiveX object access (web-activex.rules)
 * 1:7926 <-> DISABLED <-> WEB-ACTIVEX DXTFilter ActiveX clsid access (web-activex.rules)
 * 1:7494 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMT Virtual Source ActiveX clsid access (web-activex.rules)
 * 1:971 <-> DISABLED <-> WEB-IIS ISAPI .printer access (web-iis.rules)
 * 1:8492 <-> DISABLED <-> WEB-COLDFUSION openfile.cfm access (web-coldfusion.rules)
 * 1:8816 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DAJoinStyle.1 ActiveX clsid access (web-activex.rules)
 * 1:4187 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Terminal Services Advanced Client ActiveX object access (web-activex.rules)
 * 1:7888 <-> DISABLED <-> WEB-ACTIVEX AOLFlash.AOLFlash ActiveX clsid access (web-activex.rules)
 * 1:912 <-> DISABLED <-> WEB-COLDFUSION parks access (web-coldfusion.rules)
 * 1:7987 <-> DISABLED <-> WEB-ACTIVEX WebViewFolderIcon.WebViewFolderIcon.2 ActiveX clsid access (web-activex.rules)
 * 1:6346 <-> DISABLED <-> SPYWARE-PUT Adware stationripper update detection (spyware-put.rules)
 * 1:832 <-> DISABLED <-> WEB-CGI perl.exe access (web-cgi.rules)
 * 1:885 <-> DISABLED <-> WEB-CGI bash access (web-cgi.rules)
 * 1:4193 <-> DISABLED <-> WEB-ACTIVEX Kodak Image Editing ActiveX object access (web-activex.rules)
 * 1:7954 <-> DISABLED <-> WEB-ACTIVEX Microsoft Forms 2.0 ComboBox ActiveX clsid access (web-activex.rules)
 * 1:7974 <-> DISABLED <-> WEB-ACTIVEX Rendezvous Class ActiveX clsid access (web-activex.rules)
 * 1:8491 <-> DISABLED <-> WEB-COLDFUSION eval.cfm access (web-coldfusion.rules)
 * 1:5826 <-> DISABLED <-> SPYWARE-PUT Adware broadcasturban tuner runtime detection - pass user info to server (spyware-put.rules)
 * 1:8738 <-> DISABLED <-> WEB-ACTIVEX Macrovision InstallShield Update Service ActiveX clsid access (web-activex.rules)
 * 1:8045 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Video Effect Class Manager 2 Input ActiveX clsid access (web-activex.rules)
 * 1:8850 <-> DISABLED <-> WEB-ACTIVEX Microsoft Agent Custom Proxy Class ActiveX clsid access (web-activex.rules)
 * 1:4236 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMI ASDI Extension ActiveX object access (web-activex.rules)
 * 1:966 <-> DISABLED <-> WEB-FRONTPAGE .... request (web-frontpage.rules)
 * 1:8837 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DABbox3.1 ActiveX clsid access (web-activex.rules)
 * 1:906 <-> DISABLED <-> WEB-COLDFUSION getfile.cfm access (web-coldfusion.rules)
 * 1:8025 <-> DISABLED <-> WEB-ACTIVEX Microsoft HTML Window Security Proxy ActiveX clsid access (web-activex.rules)
 * 1:8411 <-> DISABLED <-> WEB-ACTIVEX DocFind Command ActiveX clsid access (web-activex.rules)
 * 1:862 <-> DISABLED <-> WEB-CGI csh access (web-cgi.rules)
 * 1:956 <-> DISABLED <-> WEB-FRONTPAGE register.txt access (web-frontpage.rules)
 * 1:7999 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer CLSID_CDIDeviceActionConfigPage ActiveX clsid access (web-activex.rules)
 * 1:4901 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer VMR Allocator Presenter 9 ActiveX object access (web-activex.rules)
 * 1:4179 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows DirectX Files Viewer ActiveX object access (web-activex.rules)
 * 1:947 <-> DISABLED <-> WEB-FRONTPAGE orders.txt access (web-frontpage.rules)
 * 1:868 <-> DISABLED <-> WEB-CGI rsh access (web-cgi.rules)
 * 1:4229 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer MSAPP Export Support for Office Access ActiveX object access (web-activex.rules)
 * 1:4896 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer PSTypeLib ActiveX object access (web-activex.rules)
 * 1:7952 <-> DISABLED <-> WEB-ACTIVEX Microsoft DirectAnimation Windowed Control ActiveX clsid access (web-activex.rules)
 * 1:6004 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DT DDS Circular Auto Layout Logic 2 ActiveX object access (web-activex.rules)
 * 1:4912 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Repository Root ActiveX object access (web-activex.rules)
 * 1:7472 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMT FormatConversion Prop Page ActiveX clsid access (web-activex.rules)
 * 1:8053 <-> DISABLED <-> WEB-ACTIVEX DirectAnimation.PathControl ActiveX clsid access (web-activex.rules)
 * 1:904 <-> DISABLED <-> WEB-COLDFUSION exampleapp application.cfm (web-coldfusion.rules)
 * 1:7425 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer 9x8Resize ActiveX clsid access (web-activex.rules)
 * 1:4215 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer HTML Popup Window ActiveX object access (web-activex.rules)
 * 1:6517 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DXImageTransform.Microsoft.Light ActiveX clsid access (web-activex.rules)
 * 1:933 <-> DISABLED <-> WEB-COLDFUSION onrequestend.cfm access (web-coldfusion.rules)
 * 1:7433 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectX Transform Wrapper Property Page ActiveX clsid access (web-activex.rules)
 * 1:7436 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Dynamic Casts ActiveX function call (web-activex.rules)
 * 1:7902 <-> DISABLED <-> WEB-ACTIVEX CDDBControlAOL.CDDBAOLControl ActiveX clsid access (web-activex.rules)
 * 1:6684 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DXImageTransform.Microsoft.MMSpecialEffect1Input ActiveX clsid access (web-activex.rules)
 * 1:4176 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office 2000 and 2002 Web Components Chart ActiveX object access (web-activex.rules)
 * 1:7462 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMT Black Frame Generator ActiveX clsid access (web-activex.rules)
 * 1:4218 <-> DISABLED <-> WEB-ACTIVEX Microsoft Microsoft Windows Visual Basic WebClass ActiveX object access (web-activex.rules)
 * 1:901 <-> DISABLED <-> WEB-CGI webspirs.cgi access (web-cgi.rules)
 * 1:8019 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Address Bar ActiveX clsid access (web-activex.rules)
 * 1:6188 <-> DISABLED <-> SPYWARE-PUT Adware ISTBar runtime detection - bar (spyware-put.rules)
 * 1:9129 <-> DISABLED <-> WEB-ACTIVEX WinZip FileView 6.1 ActiveX clsid access (web-activex.rules)
 * 1:940 <-> DISABLED <-> WEB-FRONTPAGE shtml.dll access (web-frontpage.rules)
 * 1:5963 <-> DISABLED <-> SPYWARE-PUT Hijacker searchfast detection - search request (spyware-put.rules)
 * 1:8765 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DAView.1 ActiveX clsid access (web-activex.rules)
 * 1:8419 <-> ENABLED <-> WEB-ACTIVEX Microsoft Windows Explorer WebViewFolderIcon.WebViewFolderIcon.1 ActiveX function call (web-activex.rules)
 * 1:9795 <-> DISABLED <-> WEB-ACTIVEX Panda ActiveScan ActiveScan.1 ActiveX clsid access (web-activex.rules)
 * 1:7942 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer http Asychronous Pluggable Protocol Handler ActiveX clsid access (web-activex.rules)
 * 1:7906 <-> DISABLED <-> WEB-ACTIVEX CDO.KnowledgeSearchFolder ActiveX clsid access (web-activex.rules)
 * 1:8774 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DAUserData.1 ActiveX clsid access (web-activex.rules)
 * 1:977 <-> DISABLED <-> WEB-IIS .cnf access (web-iis.rules)
 * 1:7450 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Stetch ActiveX clsid access (web-activex.rules)
 * 1:5884 <-> ENABLED <-> PUA-TOOLBARS Hijacker copernic meta toolbar runtime detection - check toolbar & category info (pua-toolbars.rules)
 * 1:857 <-> DISABLED <-> WEB-CGI faxsurvey access (web-cgi.rules)
 * 1:7878 <-> DISABLED <-> WEB-ACTIVEX AxMetaStream.MetaStreamCtl ActiveX clsid access (web-activex.rules)
 * 1:4982 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Adodb.Stream ActiveX object access (web-activex.rules)
 * 1:881 <-> DISABLED <-> WEB-CGI archie access (web-cgi.rules)
 * 1:8717 <-> DISABLED <-> WEB-ACTIVEX VsaIDE.DTE ActiveX clsid access (web-activex.rules)
 * 1:918 <-> DISABLED <-> WEB-COLDFUSION expeval access (web-coldfusion.rules)
 * 1:7582 <-> DISABLED <-> SPYWARE-PUT Trickler pcast runtime detection - update checking (spyware-put.rules)
 * 1:965 <-> DISABLED <-> WEB-FRONTPAGE writeto.cnf access (web-frontpage.rules)
 * 1:959 <-> DISABLED <-> WEB-FRONTPAGE service.pwd (web-frontpage.rules)
 * 1:897 <-> DISABLED <-> WEB-CGI pals-cgi access (web-cgi.rules)
 * 1:8744 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DAEvent.1 ActiveX clsid access (web-activex.rules)
 * 1:6005 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DT DDS Straight Line Routing Logic 2 ActiveX object access (web-activex.rules)
 * 1:6187 <-> DISABLED <-> SPYWARE-PUT Adware ISTBar runtime detection - scripts (spyware-put.rules)
 * 1:7564 <-> DISABLED <-> SPYWARE-PUT Hijacker startnow runtime detection (spyware-put.rules)
 * 1:8490 <-> DISABLED <-> WEB-COLDFUSION viewexample.cfm access (web-coldfusion.rules)
 * 1:935 <-> DISABLED <-> WEB-COLDFUSION startstop DOS access (web-coldfusion.rules)
 * 1:7500 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WM VIH2 Fix ActiveX clsid access (web-activex.rules)
 * 1:6268 <-> DISABLED <-> SPYWARE-PUT Hijacker gigatech superbar runtime detection - self update - download exe (spyware-put.rules)
 * 1:932 <-> DISABLED <-> WEB-COLDFUSION application.cfm access (web-coldfusion.rules)
 * 1:8047 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WaveIn Class Manager ActiveX clsid access (web-activex.rules)
 * 1:7468 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMT DirectX Transform Wrapper ActiveX clsid access (web-activex.rules)
 * 1:8399 <-> DISABLED <-> WEB-ACTIVEX Microsoft.WebCapture ActiveX clsid access (web-activex.rules)
 * 1:7537 <-> DISABLED <-> SPYWARE-PUT Trackware arrow search runtime detection (spyware-put.rules)
 * 1:7880 <-> DISABLED <-> WEB-ACTIVEX AxMetaStream.MetaStreamCtlSecondary ActiveX clsid access (web-activex.rules)
 * 1:8021 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer ISSimpleCommandCreator.1 ActiveX clsid access (web-activex.rules)
 * 1:892 <-> DISABLED <-> WEB-CGI AnyForm2 access (web-cgi.rules)
 * 1:845 <-> DISABLED <-> WEB-CGI AT-admin.cgi access (web-cgi.rules)
 * 1:8783 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DAString.1 ActiveX clsid access (web-activex.rules)
 * 1:824 <-> DISABLED <-> WEB-CGI php.cgi access (web-cgi.rules)
 * 1:8387 <-> DISABLED <-> WEB-ACTIVEX RealNetworks RealPlayer RNX Download Handler ActiveX clsid access (web-activex.rules)
 * 1:8066 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Scripting Host Shell ActiveX clsid access (web-activex.rules)
 * 1:5949 <-> DISABLED <-> PUA-TOOLBARS Trackware iggsey toolbar detection - simpleticker.htm request (pua-toolbars.rules)
 * 1:7488 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMT Screen capture Filter ActiveX clsid access (web-activex.rules)
 * 1:8725 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows System Monitor ActiveX clsid access (web-activex.rules)
 * 1:815 <-> DISABLED <-> WEB-CGI websendmail access (web-cgi.rules)
 * 1:7464 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMT DeInterlace Filter ActiveX clsid access (web-activex.rules)
 * 1:7900 <-> DISABLED <-> WEB-ACTIVEX AOL.UPFCtrl ActiveX clsid access (web-activex.rules)
 * 1:8393 <-> DISABLED <-> WEB-ACTIVEX WebDetectFrm ActiveX clsid access (web-activex.rules)
 * 1:7490 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMT Switch Filter ActiveX clsid access (web-activex.rules)
 * 1:8037 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Swedish_Default Stemmer ActiveX clsid access (web-activex.rules)
 * 1:973 <-> DISABLED <-> WEB-IIS *.idc attempt (web-iis.rules)
 * 1:7496 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMT Volume ActiveX clsid access (web-activex.rules)
 * 1:8385 <-> DISABLED <-> WEB-ACTIVEX RealNetworks RealPlayer Playback Handler ActiveX clsid access (web-activex.rules)
 * 1:914 <-> DISABLED <-> WEB-COLDFUSION beaninfo access (web-coldfusion.rules)
 * 1:8792 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DAPoint2.1 ActiveX clsid access (web-activex.rules)
 * 1:7995 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer clbcatq.dll ActiveX clsid access (web-activex.rules)
 * 1:9798 <-> DISABLED <-> WEB-ACTIVEX Panda ActiveScan PAVPZ.SOS.1 ActiveX clsid access (web-activex.rules)
 * 1:964 <-> DISABLED <-> WEB-FRONTPAGE users.pwd access (web-frontpage.rules)
 * 1:4200 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Index Server Scope Administration ActiveX object access (web-activex.rules)
 * 1:8840 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DABbox2.1 ActiveX clsid access (web-activex.rules)
 * 1:812 <-> DISABLED <-> WEB-CGI webplus version access (web-cgi.rules)
 * 1:4186 <-> DISABLED <-> WEB-ACTIVEX Kodak Image Editing ActiveX object access (web-activex.rules)
 * 1:8741 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DAFontStyle.1 ActiveX clsid access (web-activex.rules)
 * 1:4231 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer SysTray ActiveX object access (web-activex.rules)
 * 1:8807 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DAMicrophone.1 ActiveX clsid access (web-activex.rules)
 * 1:895 <-> DISABLED <-> WEB-CGI redirect access (web-cgi.rules)
 * 1:7874 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office PivotTable 10.0 ActiveX clsid access (web-activex.rules)
 * 1:4205 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Visual Database Tools Database Designer v7.0 ActiveX object access (web-activex.rules)
 * 1:4234 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer MSVTDGridCtrl7 ActiveX object access (web-activex.rules)
 * 1:8049 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WaveOut and DSound Class Manager ActiveX clsid access (web-activex.rules)
 * 1:4908 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Repository Method Definition ActiveX object access (web-activex.rules)
 * 1:877 <-> DISABLED <-> WEB-CGI rksh access (web-cgi.rules)
 * 1:4230 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Search Assistant UI ActiveX object access (web-activex.rules)
 * 1:8395 <-> DISABLED <-> WEB-ACTIVEX DX3DTransform.Microsoft.CrShatter ActiveX clsid access (web-activex.rules)
 * 1:8848 <-> DISABLED <-> WEB-ACTIVEX Microsoft Agent Notify Sink Custom Proxy Class ActiveX clsid access (web-activex.rules)
 * 1:4188 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer RAV Online Scanner ActiveX object access (web-activex.rules)
 * 1:8750 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer LM.LMBehaviorFactory.1 ActiveX clsid access (web-activex.rules)
 * 1:8397 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office List 11.0 ActiveX clsid access (web-activex.rules)
 * 1:6182 <-> DISABLED <-> POLICY-SOCIAL IRC channel notice (policy-social.rules)
 * 1:891 <-> DISABLED <-> WEB-CGI upload.pl access (web-cgi.rules)
 * 1:6006 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DT Icon Control ActiveX object access (web-activex.rules)
 * 1:8825 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DADashStyle.1 ActiveX clsid access (web-activex.rules)
 * 1:4184 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Certificate Enrollment ActiveX object access (web-activex.rules)
 * 1:4913 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Repository Workspace ActiveX object access (web-activex.rules)
 * 1:849 <-> DISABLED <-> WEB-CGI view-source access (web-cgi.rules)
 * 1:905 <-> DISABLED <-> WEB-COLDFUSION application.cfm access (web-coldfusion.rules)
 * 1:7940 <-> DISABLED <-> WEB-ACTIVEX DXImageTransform.Microsoft.Gradient ActiveX clsid access (web-activex.rules)
 * 1:7920 <-> DISABLED <-> WEB-ACTIVEX DsPropertyPages.OU ActiveX clsid access (web-activex.rules)
 * 1:7484 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMT Sample Info Filter ActiveX clsid access (web-activex.rules)
 * 1:942 <-> DISABLED <-> WEB-FRONTPAGE orders.htm access (web-frontpage.rules)
 * 1:5805 <-> ENABLED <-> SPYWARE-PUT Trackware myway speedbar runtime detection - switch engines (spyware-put.rules)
 * 1:4894 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer PSEnumVariant ActiveX object access (web-activex.rules)
 * 1:6009 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows RDS.Dataspace ActiveX object access (web-activex.rules)
 * 1:928 <-> DISABLED <-> WEB-COLDFUSION exampleapp access (web-coldfusion.rules)
 * 1:4909 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Repository Property Definition ActiveX object access (web-activex.rules)
 * 1:8023 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Italian_Italian Stemmer ActiveX clsid access (web-activex.rules)
 * 1:948 <-> DISABLED <-> WEB-FRONTPAGE form_results access (web-frontpage.rules)
 * 1:8013 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer French_French Stemmer ActiveX clsid access (web-activex.rules)
 * 1:4906 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Repository Interface Definition ActiveX object access (web-activex.rules)
 * 1:888 <-> DISABLED <-> WEB-CGI wwwadmin.pl access (web-cgi.rules)
 * 1:852 <-> DISABLED <-> WEB-CGI wguest.exe access (web-cgi.rules)
 * 1:8771 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DAVector2.1 ActiveX clsid access (web-activex.rules)
 * 1:869 <-> DISABLED <-> WEB-CGI dumpenv.pl access (web-cgi.rules)
 * 1:957 <-> DISABLED <-> WEB-FRONTPAGE registrations.txt access (web-frontpage.rules)
 * 1:887 <-> DISABLED <-> WEB-CGI www-sql access (web-cgi.rules)
 * 1:8003 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Content.mbcontent.1 ActiveX clsid access (web-activex.rules)
 * 1:4198 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Blnmgrps.dll ActiveX object access (web-activex.rules)
 * 1:4202 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows DirectAnimation ActiveX object access (web-activex.rules)
 * 1:908 <-> DISABLED <-> WEB-COLDFUSION administrator access (web-coldfusion.rules)
 * 1:902 <-> DISABLED <-> WEB-CGI tstisapi.dll access (web-cgi.rules)
 * 1:7492 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMT Virtual Renderer ActiveX clsid access (web-activex.rules)
 * 1:7981 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office Access Snapshot Viewer General Property Page Object ActiveX clsid access (web-activex.rules)
 * 1:867 <-> DISABLED <-> WEB-CGI visadmin.exe access (web-cgi.rules)
 * 1:8795 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DAPath2.1 ActiveX clsid access (web-activex.rules)
 * 1:886 <-> DISABLED <-> WEB-CGI phf access (web-cgi.rules)
 * 1:890 <-> DISABLED <-> WEB-CGI sendform.cgi access (web-cgi.rules)
 * 1:8371 <-> DISABLED <-> WEB-ACTIVEX Outlook.Application ActiveX clsid access (web-activex.rules)
 * 1:5752 <-> DISABLED <-> SPYWARE-PUT Adware exactsearch runtime detection - switch search engine 2 (spyware-put.rules)
 * 1:4183 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows HTML Help ActiveX object access (web-activex.rules)
 * 1:807 <-> DISABLED <-> WEB-CGI /wwwboard/passwd.txt access (web-cgi.rules)
 * 1:7470 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMT DV Extract Filter ActiveX clsid access (web-activex.rules)
 * 1:4900 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Outlook Progress Ctl ActiveX object access (web-activex.rules)
 * 1:6263 <-> DISABLED <-> SPYWARE-PUT Hijacker gigatech superbar runtime detection - collect information (spyware-put.rules)
 * 1:7892 <-> DISABLED <-> WEB-ACTIVEX AOL Phobos Class ActiveX clsid access (web-activex.rules)
 * 1:828 <-> DISABLED <-> WEB-CGI maillist.pl access (web-cgi.rules)
 * 1:6681 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Media Transform Effects ActiveX clsid access (web-activex.rules)
 * 1:827 <-> DISABLED <-> WEB-CGI info2www access (web-cgi.rules)
 * 1:847 <-> DISABLED <-> WEB-CGI campas access (web-cgi.rules)
 * 1:7890 <-> DISABLED <-> WEB-ACTIVEX AOL.MemExpWz ActiveX clsid access (web-activex.rules)
 * 1:4196 <-> DISABLED <-> WEB-CLIENT CBO CBL CBM file transfer attempt (web-client.rules)
 * 1:4226 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DocHost User Interface Handler ActiveX object access (web-activex.rules)
 * 1:4893 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Trident HTMLEditor ActiveX object access (web-activex.rules)
 * 1:8407 <-> DISABLED <-> WEB-ACTIVEX VisualExec Control ActiveX clsid access (web-activex.rules)
 * 1:4891 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer cfw Class ActiveX object access (web-activex.rules)
 * 1:7884 <-> DISABLED <-> WEB-ACTIVEX AolCalSvr.ACCalendarListCtrl ActiveX clsid access (web-activex.rules)
 * 1:870 <-> DISABLED <-> WEB-CGI snorkerz.cmd access (web-cgi.rules)
 * 1:4232 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer SysTray Invoker ActiveX object access (web-activex.rules)
 * 1:866 <-> DISABLED <-> WEB-CGI post-query access (web-cgi.rules)
 * 1:8747 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DAEndStyle.1 ActiveX clsid access (web-activex.rules)
 * 1:8383 <-> DISABLED <-> WEB-ACTIVEX RealNetworks RealPlayer RAM Download Handler ActiveX clsid access (web-activex.rules)
 * 1:4192 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer HHOpen ActiveX object access (web-activex.rules)
 * 1:7910 <-> DISABLED <-> WEB-ACTIVEX DXImageTransform.Microsoft.DropShadow ActiveX clsid access (web-activex.rules)
 * 1:4898 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer PSTypeComp ActiveX object access (web-activex.rules)
 * 1:7498 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WM TV Out Smooth Picture Filter ActiveX clsid access (web-activex.rules)
 * 1:4199 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Blnmgrps.dll ActiveX object access (web-activex.rules)
 * 1:944 <-> DISABLED <-> WEB-FRONTPAGE fpremadm.exe access (web-frontpage.rules)
 * 1:9817 <-> DISABLED <-> WEB-ACTIVEX CEnroll.CEnroll.2 ActiveX clsid access (web-activex.rules)
 * 1:9824 <-> DISABLED <-> WEB-ACTIVEX Rediff Bol Downloader ActiveX clsid access (web-activex.rules)
 * 1:980 <-> DISABLED <-> WEB-IIS CGImail.exe access (web-iis.rules)
 * 1:9814 <-> DISABLED <-> WEB-ACTIVEX ICQPhone.SipxPhoneManager ActiveX clsid access (web-activex.rules)
 * 1:1000 <-> DISABLED <-> WEB-IIS bdir.htr access (web-iis.rules)
 * 1:984 <-> DISABLED <-> WEB-IIS JET VBA access (web-iis.rules)
 * 1:9845 <-> ENABLED <-> FILE-IDENTIFY M3U file magic detected (file-identify.rules)
 * 1:985 <-> DISABLED <-> WEB-IIS JET VBA access (web-iis.rules)
 * 1:986 <-> DISABLED <-> WEB-IIS MSProxy access (web-iis.rules)
 * 1:990 <-> DISABLED <-> WEB-FRONTPAGE _vti_inf.html access (web-frontpage.rules)
 * 1:991 <-> DISABLED <-> WEB-IIS achg.htr access (web-iis.rules)
 * 1:9914 <-> DISABLED <-> NETBIOS DCERPC NCACN-IP-TCP tapisrv ClientRequest LSetAppPriority overflow attempt (netbios.rules)
 * 1:992 <-> DISABLED <-> WEB-IIS adctest.asp access (web-iis.rules)
 * 1:993 <-> DISABLED <-> WEB-IIS iisadmin access (web-iis.rules)
 * 1:994 <-> DISABLED <-> WEB-IIS /scripts/iisadmin/default.htm access (web-iis.rules)
 * 1:995 <-> DISABLED <-> WEB-IIS ism.dll access (web-iis.rules)
 * 1:996 <-> DISABLED <-> WEB-IIS anot.htr access (web-iis.rules)
 * 1:997 <-> DISABLED <-> WEB-IIS asp-dot attempt (web-iis.rules)
 * 1:998 <-> DISABLED <-> WEB-IIS asp-srch attempt (web-iis.rules)
 * 1:999 <-> DISABLED <-> WEB-IIS bdir access (web-iis.rules)
 * 1:10013 <-> DISABLED <-> WEB-ACTIVEX CCRP FolderTreeView ActiveX clsid access (web-activex.rules)
 * 1:10015 <-> DISABLED <-> WEB-ACTIVEX Oracle ORADC ActiveX clsid access (web-activex.rules)
 * 1:1002 <-> ENABLED <-> WEB-IIS cmd.exe access (web-iis.rules)
 * 1:1004 <-> DISABLED <-> WEB-IIS codebrowser Exair access (web-iis.rules)
 * 1:1005 <-> DISABLED <-> WEB-IIS codebrowser SDK access (web-iis.rules)
 * 1:1007 <-> DISABLED <-> WEB-IIS Form_JScript.asp access (web-iis.rules)
 * 1:10084 <-> DISABLED <-> WEB-ACTIVEX NCTAudioFile2 ActiveX clsid access (web-activex.rules)
 * 1:10086 <-> DISABLED <-> WEB-ACTIVEX NCTAudioFile2 ActiveX function call access (web-activex.rules)
 * 1:1009 <-> DISABLED <-> WEB-IIS directory listing (web-iis.rules)
 * 1:10128 <-> DISABLED <-> WEB-ACTIVEX Aliplay ActiveX clsid access (web-activex.rules)
 * 1:1013 <-> DISABLED <-> WEB-IIS fpcount access (web-iis.rules)
 * 1:10137 <-> DISABLED <-> WEB-ACTIVEX Microsoft Input Method Editor ActiveX clsid access (web-activex.rules)
 * 1:10140 <-> DISABLED <-> WEB-ACTIVEX Microsoft Input Method Editor 2 ActiveX clsid access (web-activex.rules)
 * 1:10142 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer LexRefBilingualTextContext ActiveX clsid access (web-activex.rules)
 * 1:10145 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer HTML Inline Sound Control ActiveX clsid access (web-activex.rules)
 * 1:10148 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer HTML Inline Movie Control ActiveX clsid access (web-activex.rules)
 * 1:1015 <-> DISABLED <-> WEB-IIS getdrvs.exe access (web-iis.rules)
 * 1:10151 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer BlnSetUser Proxy ActiveX clsid access (web-activex.rules)
 * 1:10154 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer BlnSetUser Proxy 2 ActiveX clsid access (web-activex.rules)
 * 1:10156 <-> DISABLED <-> WEB-ACTIVEX ActiveX Soft DVD Tools ActiveX clsid access (web-activex.rules)
 * 1:1016 <-> DISABLED <-> WEB-IIS global.asa access (web-iis.rules)
 * 1:10162 <-> DISABLED <-> WEB-ACTIVEX BrowseDialog ActiveX clsid access (web-activex.rules)
 * 1:10170 <-> DISABLED <-> WEB-ACTIVEX Verisign ConfigCHK ActiveX clsid access (web-activex.rules)
 * 1:10173 <-> DISABLED <-> WEB-ACTIVEX Trend Micro OfficeScan Client ActiveX clsid access (web-activex.rules)
 * 1:10176 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Shell User Enumeration Object ActiveX clsid access (web-activex.rules)
 * 1:1018 <-> DISABLED <-> WEB-IIS iisadmpwd attempt (web-iis.rules)
 * 1:10189 <-> DISABLED <-> WEB-ACTIVEX DivXBrowserPlugin ActiveX clsid access (web-activex.rules)
 * 1:10192 <-> DISABLED <-> WEB-ACTIVEX RealNetworks RealPlayer Ierpplug.dll ActiveX clsid access (web-activex.rules)
 * 1:10193 <-> DISABLED <-> WEB-ACTIVEX RealNetworks RealPlayer Ierpplug.dll ActiveX function call access (web-activex.rules)
 * 1:10194 <-> DISABLED <-> WEB-ACTIVEX RealNetworks RealPlayer Ierpplug.dll ActiveX function call access (web-activex.rules)
 * 1:1020 <-> DISABLED <-> WEB-IIS isc$data attempt (web-iis.rules)
 * 1:10202 <-> DISABLED <-> NETBIOS DCERPC NCACN-IP-TCP trend-serverprotect _SetRealTimeScanConfigInfo attempt (netbios.rules)
 * 1:10208 <-> DISABLED <-> NETBIOS DCERPC NCACN-IP-TCP trend-serverprotect COMN_NetTestConnection attempt (netbios.rules)
 * 1:1021 <-> DISABLED <-> WEB-IIS ism.dll attempt (web-iis.rules)
 * 1:10214 <-> DISABLED <-> WEB-ACTIVEX Shockwave ActiveX Control ActiveX clsid access (web-activex.rules)
 * 1:10216 <-> DISABLED <-> WEB-ACTIVEX Shockwave ActiveX Control ActiveX function call access (web-activex.rules)
 * 1:1022 <-> DISABLED <-> WEB-IIS jet vba access (web-iis.rules)
 * 1:1023 <-> DISABLED <-> WEB-IIS msadcs.dll access (web-iis.rules)
 * 1:1024 <-> DISABLED <-> WEB-IIS newdsn.exe access (web-iis.rules)
 * 1:1025 <-> DISABLED <-> WEB-IIS perl access (web-iis.rules)
 * 1:1026 <-> DISABLED <-> WEB-IIS perl-browse newline attempt (web-iis.rules)
 * 1:1027 <-> DISABLED <-> WEB-IIS perl-browse space attempt (web-iis.rules)
 * 1:1028 <-> DISABLED <-> WEB-IIS query.asp access (web-iis.rules)
 * 1:1031 <-> DISABLED <-> WEB-IIS /SiteServer/Publishing/viewcode.asp access (web-iis.rules)
 * 1:1032 <-> DISABLED <-> WEB-IIS showcode access (web-iis.rules)
 * 1:1033 <-> DISABLED <-> WEB-IIS viewcode access (web-iis.rules)
 * 1:1034 <-> DISABLED <-> WEB-IIS viewcode access (web-iis.rules)
 * 1:1035 <-> DISABLED <-> WEB-IIS viewcode access (web-iis.rules)
 * 1:1036 <-> DISABLED <-> WEB-IIS viewcode access (web-iis.rules)
 * 1:1037 <-> DISABLED <-> WEB-IIS showcode.asp access (web-iis.rules)
 * 1:1038 <-> DISABLED <-> WEB-IIS site server config access (web-iis.rules)
 * 1:10387 <-> DISABLED <-> WEB-ACTIVEX McAfee Site Manager ActiveX clsid access (web-activex.rules)
 * 1:10389 <-> DISABLED <-> WEB-ACTIVEX McAfee Site Manager ActiveX function call access (web-activex.rules)
 * 1:1039 <-> DISABLED <-> WEB-IIS srch.htm access (web-iis.rules)
 * 1:10390 <-> DISABLED <-> WEB-ACTIVEX Symantec Support Controls SmartIssue ActiveX clsid access (web-activex.rules)
 * 1:10393 <-> DISABLED <-> WEB-ACTIVEX Symantec SupportSoft SmartIssue ActiveX clsid access (web-activex.rules)
 * 1:10395 <-> DISABLED <-> WEB-ACTIVEX Symantec SupportSoft SmartIssue ActiveX function call access (web-activex.rules)
 * 1:1040 <-> DISABLED <-> WEB-IIS srchadm access (web-iis.rules)
 * 1:10404 <-> DISABLED <-> WEB-ACTIVEX SignKorea SKCommAX ActiveX clsid access (web-activex.rules)
 * 1:1041 <-> DISABLED <-> WEB-IIS uploadn.asp access (web-iis.rules)
 * 1:10412 <-> DISABLED <-> WEB-ACTIVEX IBM Lotus SameTime STJNILoader Alt CLSID ActiveX clsid access (web-activex.rules)
 * 1:10415 <-> DISABLED <-> WEB-ACTIVEX IBM Lotus SameTime STJNILoader ActiveX clsid access (web-activex.rules)
 * 1:10423 <-> DISABLED <-> WEB-ACTIVEX Yahoo Audio Conferencing ActiveX clsid access (web-activex.rules)
 * 1:10427 <-> DISABLED <-> WEB-ACTIVEX Kaspersky AntiVirus SysInfo ActiveX clsid access (web-activex.rules)
 * 1:1043 <-> DISABLED <-> WEB-IIS viewcode.asp access (web-iis.rules)
 * 1:10431 <-> DISABLED <-> WEB-ACTIVEX Kaspersky AntiVirus KAV60Info ActiveX clsid access (web-activex.rules)
 * 1:1046 <-> DISABLED <-> WEB-IIS site/iisamples access (web-iis.rules)
 * 1:10466 <-> DISABLED <-> WEB-ACTIVEX iPIX Image Well ActiveX clsid access (web-activex.rules)
 * 1:10470 <-> DISABLED <-> WEB-ACTIVEX iPIX Media Send Class ActiveX clsid access (web-activex.rules)
 * 1:10476 <-> DISABLED <-> WEB-ACTIVEX MarkAny MaPrintModule_WORK ActiveX clsid access (web-activex.rules)
 * 1:1075 <-> DISABLED <-> WEB-IIS postinfo.asp access (web-iis.rules)
 * 1:1076 <-> DISABLED <-> WEB-IIS repost.asp access (web-iis.rules)
 * 1:1077 <-> DISABLED <-> SQL queryhit.htm access (sql.rules)
 * 1:1078 <-> DISABLED <-> SQL counter.exe access (sql.rules)
 * 1:1086 <-> DISABLED <-> WEB-PHP strings overflow (web-php.rules)
 * 1:1097 <-> DISABLED <-> WEB-CGI Talentsoft Web+ exploit attempt (web-cgi.rules)
 * 1:10978 <-> DISABLED <-> WEB-ACTIVEX Second Sight Software ActiveGS ActiveX clsid access (web-activex.rules)
 * 1:10982 <-> DISABLED <-> WEB-ACTIVEX Second Sight Software ActiveMod ActiveX clsid access (web-activex.rules)
 * 1:10986 <-> DISABLED <-> WEB-ACTIVEX GraceNote CDDB ActiveX clsid access (web-activex.rules)
 * 1:10991 <-> DISABLED <-> WEB-ACTIVEX Microgaming Download Helper ActiveX clsid access (web-activex.rules)
 * 1:10999 <-> DISABLED <-> WEB-CGI chetcpasswd access (web-cgi.rules)
 * 1:1106 <-> DISABLED <-> WEB-CGI Poll-it access (web-cgi.rules)
 * 1:11176 <-> ENABLED <-> WEB-ACTIVEX Microsoft Office PowerPoint Viewer ActiveX clsid access (web-activex.rules)
 * 1:11178 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office PowerPoint Viewer ActiveX function call access (web-activex.rules)
 * 1:11181 <-> ENABLED <-> WEB-ACTIVEX Microsoft Office Excel Viewer ActiveX clsid access (web-activex.rules)
 * 1:11183 <-> ENABLED <-> WEB-ACTIVEX Microsoft Office Excel Viewer ActiveX function call access (web-activex.rules)
 * 1:11187 <-> ENABLED <-> WEB-ACTIVEX Microsoft Office Word Viewer ActiveX clsid access (web-activex.rules)
 * 1:11189 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office Word Viewer ActiveX function call access (web-activex.rules)
 * 1:11199 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office Viewer ActiveX clsid access (web-activex.rules)
 * 1:11201 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office Viewer ActiveX function call access (web-activex.rules)
 * 1:11206 <-> DISABLED <-> WEB-ACTIVEX East Wind Software ADVDAUDIO ActiveX clsid access (web-activex.rules)
 * 1:11210 <-> DISABLED <-> WEB-ACTIVEX Sienzo Digital Music Mentor ActiveX clsid access (web-activex.rules)
 * 1:11214 <-> DISABLED <-> WEB-ACTIVEX VeralSoft HTTP File Uploader ActiveX clsid access (web-activex.rules)
 * 1:11218 <-> DISABLED <-> WEB-ACTIVEX SmartCode VNC Manager ActiveX clsid access (web-activex.rules)
 * 1:11224 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer MSAuth ActiveX clsid access (web-activex.rules)
 * 1:11228 <-> DISABLED <-> WEB-ACTIVEX Microsoft Input Method Editor 3 ActiveX clsid access (web-activex.rules)
 * 1:11230 <-> DISABLED <-> WEB-ACTIVEX Microsoft Cryptographic API COM 1 ActiveX clsid access (web-activex.rules)
 * 1:11234 <-> DISABLED <-> WEB-ACTIVEX Microsoft Cryptographic API COM 2 ActiveX clsid access (web-activex.rules)
 * 1:11236 <-> DISABLED <-> WEB-ACTIVEX OutlookExpress.AddressBook ActiveX clsid access (web-activex.rules)
 * 1:11239 <-> DISABLED <-> WEB-ACTIVEX DXImageTransform.Microsoft.Redirect ActiveX clsid access (web-activex.rules)
 * 1:11243 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DirectAnimation.DAstatics ActiveX clsid access (web-activex.rules)
 * 1:11247 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Research In Motion TeamOn Import ActiveX clsid access (web-activex.rules)
 * 1:11250 <-> DISABLED <-> WEB-ACTIVEX Sony Rootkit Uninstaller ActiveX clsid access (web-activex.rules)
 * 1:11252 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Address ActiveX clsid access (web-activex.rules)
 * 1:11253 <-> DISABLED <-> WEB-ACTIVEX Microsoft MciWndx ActiveX clsid access (web-activex.rules)
 * 1:11259 <-> DISABLED <-> WEB-ACTIVEX BarcodeWiz ActiveX clsid access (web-activex.rules)
 * 1:11261 <-> DISABLED <-> WEB-ACTIVEX BarcodeWiz ActiveX function call access (web-activex.rules)
 * 1:11268 <-> DISABLED <-> WEB-ACTIVEX Symantec Norton AntiVirus ActiveX clsid access (web-activex.rules)
 * 1:11274 <-> DISABLED <-> WEB-ACTIVEX RControl ActiveX clsid access (web-activex.rules)
 * 1:11276 <-> DISABLED <-> WEB-ACTIVEX GDivX Zenith Player AVI Fixer ActiveX clsid access (web-activex.rules)
 * 1:11280 <-> DISABLED <-> WEB-ACTIVEX FlexLabel ActiveX clsid access (web-activex.rules)
 * 1:11284 <-> DISABLED <-> WEB-ACTIVEX AudioCDRipper ActiveX clsid access (web-activex.rules)
 * 1:11291 <-> DISABLED <-> WEB-ACTIVEX Hewlett Packard HPQVWOCX.DL ActiveX clsid access (web-activex.rules)
 * 1:11293 <-> DISABLED <-> WEB-ACTIVEX IDAutomation Linear Bar Code ActiveX clsid access (web-activex.rules)
 * 1:11297 <-> DISABLED <-> WEB-ACTIVEX Clever Database Comparer ActiveX clsid access (web-activex.rules)
 * 1:11301 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DB Software Laboratory DeWizardX ActiveX clsid access (web-activex.rules)
 * 1:1134 <-> DISABLED <-> WEB-PHP Phorum admin access (web-php.rules)
 * 1:1149 <-> DISABLED <-> WEB-CGI count.cgi access (web-cgi.rules)
 * 1:11622 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office 2000 OUACTR ActiveX clsid access (web-activex.rules)
 * 1:11624 <-> DISABLED <-> WEB-ACTIVEX LeadTools ISIS ActiveX clsid access (web-activex.rules)
 * 1:11630 <-> DISABLED <-> WEB-ACTIVEX LeadTools Raster Dialog File Object ActiveX clsid access (web-activex.rules)
 * 1:11634 <-> DISABLED <-> WEB-ACTIVEX LeadTools Raster Dialog File_D Object ActiveX clsid access (web-activex.rules)
 * 1:11638 <-> DISABLED <-> WEB-ACTIVEX LeadTools Raster Document Object Library ActiveX clsid access (web-activex.rules)
 * 1:11642 <-> DISABLED <-> WEB-ACTIVEX LeadTools Raster ISIS Object ActiveX clsid access (web-activex.rules)
 * 1:11646 <-> DISABLED <-> WEB-ACTIVEX LeadTools Raster Thumbnail Object Library ActiveX clsid access (web-activex.rules)
 * 1:11650 <-> DISABLED <-> WEB-ACTIVEX LeadTools Raster Variant Object Library ActiveX clsid access (web-activex.rules)
 * 1:11654 <-> DISABLED <-> WEB-ACTIVEX LeadTools Thumbnail Browser Control ActiveX clsid access (web-activex.rules)
 * 1:11658 <-> DISABLED <-> WEB-ACTIVEX Dart ZipLite Compression ActiveX clsid access (web-activex.rules)
 * 1:11660 <-> DISABLED <-> WEB-ACTIVEX EDraw Office Viewer ActiveX clsid access (web-activex.rules)
 * 1:11673 <-> DISABLED <-> WEB-ACTIVEX Zenturi ProgramChecker ActiveX clsid access (web-activex.rules)
 * 1:11677 <-> DISABLED <-> WEB-ACTIVEX Provideo Camimage Class ISSCamControl ActiveX clsid access (web-activex.rules)
 * 1:1178 <-> DISABLED <-> WEB-PHP Phorum read access (web-php.rules)
 * 1:1179 <-> DISABLED <-> WEB-PHP Phorum violation access (web-php.rules)
 * 1:11817 <-> DISABLED <-> WEB-CGI WhatsUpGold configuration access (web-cgi.rules)
 * 1:11818 <-> DISABLED <-> WEB-ACTIVEX Yahoo Webcam Viewer Wrapper ActiveX clsid access (web-activex.rules)
 * 1:11823 <-> DISABLED <-> WEB-ACTIVEX Yahoo Webcam Upload ActiveX clsid unicode access (web-activex.rules)
 * 1:11825 <-> DISABLED <-> WEB-ACTIVEX Yahoo Webcam Upload ActiveX function call unicode access (web-activex.rules)
 * 1:11826 <-> DISABLED <-> WEB-ACTIVEX Microsoft Voice Control ActiveX clsid access (web-activex.rules)
 * 1:11830 <-> DISABLED <-> WEB-ACTIVEX Microsoft Direct Speech Recognition ActiveX clsid access (web-activex.rules)
 * 1:11839 <-> DISABLED <-> WEB-ACTIVEX TEC-IT TBarCode ActiveX clsid access (web-activex.rules)
 * 1:11942 <-> DISABLED <-> WEB-ACTIVEX Westbyte internet download accelerator ActiveX clsid access (web-activex.rules)
 * 1:11943 <-> DISABLED <-> WEB-ACTIVEX HP ModemUtil ActiveX clsid access (web-activex.rules)
 * 1:1195 <-> DISABLED <-> WEB-CGI sojourn.cgi access (web-cgi.rules)
 * 1:1197 <-> DISABLED <-> WEB-PHP Phorum code access (web-php.rules)
 * 1:12010 <-> DISABLED <-> WEB-ACTIVEX RKD Software BarCode ActiveX clsid access (web-activex.rules)
 * 1:12015 <-> DISABLED <-> WEB-ACTIVEX NCTAudioStudio2 NCT WavChunksEditor ActiveX clsid access (web-activex.rules)
 * 1:12019 <-> DISABLED <-> WEB-ACTIVEX NCTsoft NCTAudioFile2 NCTWMAFile ActiveX clsid access (web-activex.rules)
 * 1:12029 <-> DISABLED <-> WEB-ACTIVEX HP Digital Imaging hpqxml.dll ActiveX clsid access (web-activex.rules)
 * 1:12056 <-> DISABLED <-> WEB-CGI WhatsUpGold instancename overflow attempt (web-cgi.rules)
 * 1:12057 <-> DISABLED <-> WEB-CGI WhatsUpGold configuration access (web-cgi.rules)
 * 1:12062 <-> DISABLED <-> WEB-ACTIVEX HP Instant Support ActiveX clsid access (web-activex.rules)
 * 1:12083 <-> DISABLED <-> WEB-ACTIVEX Data Dynamics ActiveBar Actbar3 ActiveX clsid access (web-activex.rules)
 * 1:12087 <-> DISABLED <-> WEB-ACTIVEX McAfee NeoTrace ActiveX clsid access (web-activex.rules)
 * 1:12091 <-> DISABLED <-> WEB-ACTIVEX EldoS SecureBlackbox PGPBBox ActiveX clsid access (web-activex.rules)
 * 1:12116 <-> DISABLED <-> WEB-ACTIVEX Zenturi ProgramChecker SASATL ActiveX clsid access (web-activex.rules)
 * 1:12124 <-> DISABLED <-> SPYWARE-PUT Hijacker lookquick runtime detection - monitor and collect user info (spyware-put.rules)
 * 1:1215 <-> DISABLED <-> WEB-CGI ministats admin access (web-cgi.rules)
 * 1:12168 <-> DISABLED <-> WEB-ACTIVEX Computer Associates ETrust Intrusion Detection Caller.DLL ActiveX clsid access (web-activex.rules)
 * 1:12189 <-> DISABLED <-> WEB-ACTIVEX Clever Internet Suite ActiveX clsid access (web-activex.rules)
 * 1:1219 <-> DISABLED <-> WEB-CGI dfire.cgi access (web-cgi.rules)
 * 1:12193 <-> DISABLED <-> WEB-ACTIVEX Yahoo Widgets Engine ActiveX clsid access (web-activex.rules)
 * 1:12200 <-> DISABLED <-> WEB-ACTIVEX VMWare IntraProcessLogging ActiveX clsid access (web-activex.rules)
 * 1:12203 <-> DISABLED <-> WEB-ACTIVEX VMWare Vielib.dll ActiveX clsid access (web-activex.rules)
 * 1:12246 <-> DISABLED <-> WEB-ACTIVEX Symantec NavComUI AxSysListView32 ActiveX clsid access (web-activex.rules)
 * 1:12250 <-> DISABLED <-> WEB-ACTIVEX Symantec NavComUI AxSysListView32OAA ActiveX clsid access (web-activex.rules)
 * 1:12256 <-> DISABLED <-> FILE-OFFICE Microsoft Office Excel malformed FBI record (file-office.rules)
 * 1:12257 <-> DISABLED <-> WEB-ACTIVEX Microsoft DirectX Media SDK ActiveX clsid access (web-activex.rules)
 * 1:12261 <-> DISABLED <-> WEB-ACTIVEX Microsoft Visual Basic 6 PDWizard.File ActiveX clsid access (web-activex.rules)
 * 1:12265 <-> DISABLED <-> WEB-ACTIVEX Microsoft Visual Basic 6 SearchHelper ActiveX clsid access (web-activex.rules)
 * 1:12269 <-> DISABLED <-> WEB-ACTIVEX Microsoft Visual Basic 6 TLIApplication ActiveX clsid access (web-activex.rules)
 * 1:12270 <-> DISABLED <-> WEB-ACTIVEX Microsoft Visual Basic 6 TLIApplication ActiveX function call (web-activex.rules)
 * 1:12273 <-> DISABLED <-> WEB-ACTIVEX Microsoft Visual Basic 6 TypeLibInfo ActiveX clsid access (web-activex.rules)
 * 1:12277 <-> DISABLED <-> EXPLOIT Microsoft Internet Explorer CSS memory corruption exploit (exploit.rules)
 * 1:12283 <-> ENABLED <-> FILE-IDENTIFY Microsoft Office Excel xlw file magic detected (file-identify.rules)
 * 1:12293 <-> ENABLED <-> PUA-TOOLBARS Hijacker morpheus toolbar runtime detection - get cfg info (pua-toolbars.rules)
 * 1:12301 <-> DISABLED <-> WEB-ACTIVEX eCentrex VOIP Client Module ActiveX clsid access (web-activex.rules)
 * 1:12303 <-> DISABLED <-> POLICY-SOCIAL Google Chat web client connection (policy-social.rules)
 * 1:12305 <-> DISABLED <-> POLICY-SOCIAL Yahoo Messenger web client connection (policy-social.rules)
 * 1:12307 <-> ENABLED <-> NETBIOS DCERPC NCACN-IP-TCP trend-serverprotect _SetPagerNotifyConfig attempt (netbios.rules)
 * 1:12317 <-> DISABLED <-> NETBIOS DCERPC NCACN-IP-TCP trend-serverprotect-earthagent RPCFN_CopyAUSrc attempt (netbios.rules)
 * 1:12326 <-> ENABLED <-> NETBIOS DCERPC NCACN-IP-TCP trend-serverprotect _AddTaskExportLogItem attempt (netbios.rules)
 * 1:12332 <-> ENABLED <-> NETBIOS DCERPC NCACN-IP-TCP trend-serverprotect _TakeActionOnAFile attempt (netbios.rules)
 * 1:12341 <-> ENABLED <-> NETBIOS DCERPC NCACN-IP-TCP trend-serverprotect Trent_req_num_a0030 attempt (netbios.rules)
 * 1:12347 <-> ENABLED <-> NETBIOS DCERPC NCACN-IP-TCP trend-serverprotect _SetSvcImpersonateUser attempt (netbios.rules)
 * 1:12361 <-> DISABLED <-> SPYWARE-PUT Infostealer.Monstres runtime detection (spyware-put.rules)
 * 1:12364 <-> DISABLED <-> PUA-TOOLBARS Hijacker proventactics 3.5 runtime detection - get cfg information (pua-toolbars.rules)
 * 1:12380 <-> DISABLED <-> WEB-ACTIVEX Oracle JInitiator ActiveX clsid access (web-activex.rules)
 * 1:12384 <-> DISABLED <-> WEB-ACTIVEX Yahoo Messenger YVerInfo ActiveX clsid access (web-activex.rules)
 * 1:12388 <-> DISABLED <-> WEB-ACTIVEX PPStream PowerPlayer ActiveX clsid access (web-activex.rules)
 * 1:12393 <-> DISABLED <-> WEB-ACTIVEX Intuit QuickBooks Online Edition 1 ActiveX clsid access (web-activex.rules)
 * 1:12395 <-> DISABLED <-> WEB-ACTIVEX Intuit QuickBooks Online Edition 2 ActiveX clsid access (web-activex.rules)
 * 1:12397 <-> DISABLED <-> WEB-ACTIVEX Intuit QuickBooks Online Edition 3 ActiveX clsid access (web-activex.rules)
 * 1:12399 <-> DISABLED <-> WEB-ACTIVEX Intuit QuickBooks Online Edition 4 ActiveX clsid access (web-activex.rules)
 * 1:12401 <-> DISABLED <-> WEB-ACTIVEX Intuit QuickBooks Online Edition 5 ActiveX clsid access (web-activex.rules)
 * 1:12403 <-> DISABLED <-> WEB-ACTIVEX Intuit QuickBooks Online Edition 6 ActiveX clsid access (web-activex.rules)
 * 1:12405 <-> DISABLED <-> WEB-ACTIVEX Intuit QuickBooks Online Edition 7 ActiveX clsid access (web-activex.rules)
 * 1:12407 <-> DISABLED <-> WEB-ACTIVEX Intuit QuickBooks Online Edition 8 ActiveX clsid access (web-activex.rules)
 * 1:12409 <-> DISABLED <-> WEB-ACTIVEX Intuit QuickBooks Online Edition 9 ActiveX clsid access (web-activex.rules)
 * 1:12411 <-> DISABLED <-> WEB-ACTIVEX Intuit QuickBooks Online Edition 10 ActiveX clsid access (web-activex.rules)
 * 1:12413 <-> DISABLED <-> WEB-ACTIVEX Earth Resource Mapper NCSView ActiveX clsid access (web-activex.rules)
 * 1:12417 <-> DISABLED <-> WEB-ACTIVEX Microsoft Visual FoxPro ActiveX clsid access (web-activex.rules)
 * 1:1242 <-> DISABLED <-> WEB-IIS ISAPI .ida access (web-iis.rules)
 * 1:12428 <-> DISABLED <-> WEB-ACTIVEX GlobalLink glitemflat.dll ActiveX clsid access (web-activex.rules)
 * 1:1243 <-> DISABLED <-> WEB-IIS ISAPI .ida attempt (web-iis.rules)
 * 1:12430 <-> DISABLED <-> WEB-ACTIVEX EDraw Office Viewer Component ActiveX clsid access (web-activex.rules)
 * 1:12434 <-> DISABLED <-> WEB-ACTIVEX BaoFeng Storm MPS.dll ActiveX clsid access (web-activex.rules)
 * 1:12437 <-> DISABLED <-> POLICY-MULTIMEDIA Google video player request (policy-multimedia.rules)
 * 1:12438 <-> DISABLED <-> WEB-ACTIVEX Ultra Crypto Component CryptoX.dll ActiveX clsid access (web-activex.rules)
 * 1:1244 <-> DISABLED <-> WEB-IIS ISAPI .idq attempt (web-iis.rules)
 * 1:12442 <-> DISABLED <-> WEB-ACTIVEX Ultra Crypto Component CryptoX.dll 2 ActiveX clsid access (web-activex.rules)
 * 1:12444 <-> DISABLED <-> WEB-ACTIVEX Microsoft SQL Server Distributed Management Objects ActiveX clsid access (web-activex.rules)
 * 1:12448 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Agent Control ActiveX clsid access (web-activex.rules)
 * 1:1245 <-> DISABLED <-> WEB-IIS ISAPI .idq access (web-iis.rules)
 * 1:12452 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Agent File Provider ActiveX clsid access (web-activex.rules)
 * 1:12454 <-> ENABLED <-> FILE-IDENTIFY Microsoft Windows Media ASF file magic detected (file-identify.rules)
 * 1:12456 <-> DISABLED <-> FILE-IDENTIFY SAP Crystal Reports file magic detected (file-identify.rules)
 * 1:12459 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Visual Studio 6 PDWizard.ocx ActiveX clsid access (web-activex.rules)
 * 1:12461 <-> DISABLED <-> WEB-ACTIVEX Microsoft Visual Studio 6 VBTOVSI.dll ActiveX clsid access (web-activex.rules)
 * 1:12466 <-> DISABLED <-> WEB-ACTIVEX MW6 Technologies QRCode ActiveX clsid access (web-activex.rules)
 * 1:12468 <-> DISABLED <-> WEB-ACTIVEX COWON America JetAudio JetFlExt.dll ActiveX clsid access (web-activex.rules)
 * 1:12472 <-> DISABLED <-> WEB-ACTIVEX Oracle Java Web Start ActiveX clsid access (web-activex.rules)
 * 1:12476 <-> DISABLED <-> WEB-ACTIVEX Yahoo Messenger CYFT ActiveX clsid access (web-activex.rules)
 * 1:1248 <-> DISABLED <-> WEB-FRONTPAGE rad fp30reg.dll access (web-frontpage.rules)
 * 1:1249 <-> DISABLED <-> WEB-FRONTPAGE frontpage rad fp4areg.dll access (web-frontpage.rules)
 * 1:1256 <-> DISABLED <-> WEB-IIS CodeRed v2 root.exe access (web-iis.rules)
 * 1:12598 <-> DISABLED <-> WEB-ACTIVEX Xunlei Web Thunder ActiveX clsid access (web-activex.rules)
 * 1:12600 <-> DISABLED <-> WEB-ACTIVEX ebCrypt IncrementalHash ActiveX clsid access (web-activex.rules)
 * 1:12604 <-> DISABLED <-> WEB-ACTIVEX ebCrypt PRNGenerator ActiveX clsid access (web-activex.rules)
 * 1:12612 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows MFC Library ActiveX clsid access (web-activex.rules)
 * 1:12614 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows MFC Library ActiveX function call access (web-activex.rules)
 * 1:12616 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Visual Studio 6 PDWizard.ocx ActiveX function call access (web-activex.rules)
 * 1:12637 <-> DISABLED <-> WEB-ACTIVEX Kaspersky Online Scanner KAVWebScan.dll ActiveX clsid access (web-activex.rules)
 * 1:12641 <-> DISABLED <-> FILE-IDENTIFY Microsoft Word for Mac 5 file magic detected (file-identify.rules)
 * 1:12644 <-> DISABLED <-> WEB-ACTIVEX PBEmail7 ActiveX clsid access (web-activex.rules)
 * 1:12648 <-> DISABLED <-> WEB-ACTIVEX DB Software Laboratory VImpX ActiveX clsid access (web-activex.rules)
 * 1:12655 <-> DISABLED <-> SPYWARE-PUT Hijacker rabio 4.2 runtime detection - download updates (spyware-put.rules)
 * 1:12677 <-> DISABLED <-> SPYWARE-PUT Adware ISTBar runtime detection - softwares (spyware-put.rules)
 * 1:12689 <-> DISABLED <-> WEB-ACTIVEX GlobalLink ConnectAndEnterRoom ActiveX clsid access (web-activex.rules)
 * 1:12714 <-> DISABLED <-> WEB-ACTIVEX WebEx GPCContainer ActiveX clsid access (web-activex.rules)
 * 1:12729 <-> DISABLED <-> WEB-ACTIVEX AOL Radio AmpX ActiveX clsid access (web-activex.rules)
 * 1:12733 <-> DISABLED <-> WEB-ACTIVEX ComponentOne FlexGrid ActiveX clsid access (web-activex.rules)
 * 1:12737 <-> DISABLED <-> WEB-ACTIVEX Xunlei Thunder PPLAYER.DLL ActiveX clsid access (web-activex.rules)
 * 1:12747 <-> DISABLED <-> WEB-ACTIVEX BitDefender Online Scanner ActiveX clsid access (web-activex.rules)
 * 1:12749 <-> DISABLED <-> WEB-ACTIVEX BitDefender Online Scanner ActiveX function call access (web-activex.rules)
 * 1:12751 <-> DISABLED <-> WEB-ACTIVEX RichFX Basic Player ActiveX clsid access (web-activex.rules)
 * 1:12755 <-> DISABLED <-> WEB-ACTIVEX PPStream PowerList ActiveX clsid access (web-activex.rules)
 * 1:12762 <-> DISABLED <-> WEB-ACTIVEX Yahoo Toolbar Helper Class ActiveX clsid access (web-activex.rules)
 * 1:12766 <-> DISABLED <-> WEB-ACTIVEX RealNetworks RealPlayer RMOC3260.DLL ActiveX clsid access (web-activex.rules)
 * 1:12767 <-> DISABLED <-> WEB-ACTIVEX RealNetworks RealPlayer RMOC3260.DLL ActiveX function call access (web-activex.rules)
 * 1:12780 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader 4 Vulnerable Methods ActiveX clsid access (web-activex.rules)
 * 1:12791 <-> DISABLED <-> PUA-TOOLBARS Adware gophoria toolbar runtime detection (pua-toolbars.rules)
 * 1:12794 <-> DISABLED <-> SPYWARE-PUT Hijacker gralicwrap runtime detection - search frauddb process (spyware-put.rules)
 * 1:12795 <-> DISABLED <-> SPYWARE-PUT Hijacker gralicwrap runtime detection - display frauddb information (spyware-put.rules)
 * 1:12803 <-> DISABLED <-> WEB-ACTIVEX VideoLAN VLC ActiveX clsid access (web-activex.rules)
 * 1:1285 <-> DISABLED <-> WEB-IIS msdac access (web-iis.rules)
 * 1:1286 <-> DISABLED <-> WEB-IIS _mem_bin access (web-iis.rules)
 * 1:12948 <-> DISABLED <-> WEB-ACTIVEX Vantage Linguistics 1 ActiveX clsid access (web-activex.rules)
 * 1:12950 <-> DISABLED <-> WEB-ACTIVEX Vantage Linguistics 2 ActiveX clsid access (web-activex.rules)
 * 1:12952 <-> DISABLED <-> WEB-ACTIVEX Vantage Linguistics 3 ActiveX clsid access (web-activex.rules)
 * 1:12954 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DXLTPI.DLL ActiveX clsid access (web-activex.rules)
 * 1:12957 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer MSN Heartbeat 2 ActiveX clsid access (web-activex.rules)
 * 1:12959 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer MSN Heartbeat 3 ActiveX clsid access (web-activex.rules)
 * 1:12961 <-> DISABLED <-> WEB-ACTIVEX Intuit QuickBooks Online Import 1 ActiveX clsid access (web-activex.rules)
 * 1:12963 <-> DISABLED <-> WEB-ACTIVEX Intuit QuickBooks Online Import 2 ActiveX clsid access (web-activex.rules)
 * 1:12965 <-> DISABLED <-> WEB-ACTIVEX Intuit QuickBooks Online Import 3 ActiveX clsid access (web-activex.rules)
 * 1:12967 <-> DISABLED <-> WEB-ACTIVEX Intuit QuickBooks Online Import 4 ActiveX clsid access (web-activex.rules)
 * 1:12969 <-> DISABLED <-> WEB-ACTIVEX Intuit QuickBooks Online Import 5 ActiveX clsid access (web-activex.rules)
 * 1:1301 <-> DISABLED <-> WEB-PHP admin.php access (web-php.rules)
 * 1:1304 <-> DISABLED <-> WEB-CGI txt2html.cgi access (web-cgi.rules)
 * 1:1307 <-> DISABLED <-> WEB-CGI store.cgi access (web-cgi.rules)
 * 1:1308 <-> DISABLED <-> WEB-CGI sendmessage.cgi access (web-cgi.rules)
 * 1:1309 <-> DISABLED <-> WEB-CGI zsh access (web-cgi.rules)
 * 1:13161 <-> ENABLED <-> EXPLOIT HP OpenView CGI parameter buffer overflow attempt (exploit.rules)
 * 1:13219 <-> DISABLED <-> WEB-ACTIVEX HP Software Update RulesEngine.dll ActiveX clsid access (web-activex.rules)
 * 1:13224 <-> DISABLED <-> WEB-ACTIVEX Yahoo Toolbar YShortcut ActiveX clsid access (web-activex.rules)
 * 1:13228 <-> DISABLED <-> WEB-ACTIVEX HP eSupportDiagnostics 1 ActiveX clsid access (web-activex.rules)
 * 1:13230 <-> DISABLED <-> WEB-ACTIVEX HP eSupportDiagnostics 2 ActiveX clsid access (web-activex.rules)
 * 1:13232 <-> DISABLED <-> WEB-ACTIVEX Persits Software XUpload ActiveX clsid access (web-activex.rules)
 * 1:13234 <-> DISABLED <-> WEB-ACTIVEX Persits Software XUpload ActiveX function call access (web-activex.rules)
 * 1:13258 <-> DISABLED <-> WEB-ACTIVEX IBM Lotus Domino Web Access 6 ActiveX clsid access (web-activex.rules)
 * 1:13262 <-> DISABLED <-> WEB-ACTIVEX IBM Lotus Domino Web Access 7 ActiveX clsid access (web-activex.rules)
 * 1:13266 <-> DISABLED <-> WEB-ACTIVEX SkyFex Client ActiveX clsid access (web-activex.rules)
 * 1:13273 <-> DISABLED <-> WEB-ACTIVEX DivX Web Player ActiveX clsid access (web-activex.rules)
 * 1:13289 <-> DISABLED <-> WEB-ACTIVEX Gatway CWebLaunchCtl ActiveX clsid access (web-activex.rules)
 * 1:13294 <-> DISABLED <-> WEB-ACTIVEX Microsoft Rich TextBox ActiveX clsid access (web-activex.rules)
 * 1:13296 <-> DISABLED <-> WEB-ACTIVEX Microsoft Rich TextBox ActiveX clsid access (web-activex.rules)
 * 1:13303 <-> DISABLED <-> WEB-ACTIVEX Microsoft Visual FoxPro 2 ActiveX clsid access (web-activex.rules)
 * 1:13312 <-> DISABLED <-> WEB-ACTIVEX StreamAudio ProxyManager ActiveX clsid access (web-activex.rules)
 * 1:13321 <-> DISABLED <-> WEB-ACTIVEX Microsoft Package and Deployment Wizard ActiveX clsid access (web-activex.rules)
 * 1:13325 <-> DISABLED <-> WEB-ACTIVEX Macrovision FLEXnet Connect ActiveX clsid access (web-activex.rules)
 * 1:13329 <-> DISABLED <-> WEB-ACTIVEX Toshiba Surveillance Surveillix DVR ActiveX clsid access (web-activex.rules)
 * 1:13333 <-> DISABLED <-> WEB-ACTIVEX HP Virtual Rooms ActiveX clsid access (web-activex.rules)
 * 1:13335 <-> DISABLED <-> WEB-ACTIVEX Lycos File Upload Component ActiveX clsid access (web-activex.rules)
 * 1:13337 <-> DISABLED <-> WEB-ACTIVEX Comodo AntiVirus ActiveX clsid access (web-activex.rules)
 * 1:13348 <-> DISABLED <-> WEB-ACTIVEX Move Networks Media Player ActiveX clsid access (web-activex.rules)
 * 1:13419 <-> ENABLED <-> WEB-ACTIVEX Facebook Photo Uploader ActiveX clsid access (web-activex.rules)
 * 1:13421 <-> ENABLED <-> WEB-ACTIVEX Facebook Photo Uploader ActiveX function call access (web-activex.rules)
 * 1:13423 <-> DISABLED <-> WEB-ACTIVEX SwiftView ActiveX clsid access (web-activex.rules)
 * 1:13426 <-> DISABLED <-> WEB-ACTIVEX Yahoo Music JukeBox DataGrid ActiveX clsid access (web-activex.rules)
 * 1:13430 <-> DISABLED <-> WEB-ACTIVEX Yahoo Music JukeBox MediaGrid ActiveX clsid access (web-activex.rules)
 * 1:13434 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader 4 Property Overflows ActiveX clsid access (web-activex.rules)
 * 1:13438 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader 5 Vulnerable Methods ActiveX clsid access (web-activex.rules)
 * 1:13442 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader 5 Property Overflows ActiveX clsid access (web-activex.rules)
 * 1:13446 <-> DISABLED <-> WEB-ACTIVEX GlobalLink HanGamePlugin ActiveX clsid access (web-activex.rules)
 * 1:13477 <-> DISABLED <-> FILE-PDF Adobe PDF collab.collectEmailInfo exploit attempt - compressed (file-pdf.rules)
 * 1:13478 <-> DISABLED <-> FILE-PDF Adobe Reader collab.collectEmailInfo exploit attempt (file-pdf.rules)
 * 1:13512 <-> DISABLED <-> SQL generic sql exec injection attempt - GET parameter (sql.rules)
 * 1:13513 <-> DISABLED <-> SQL generic sql insert injection atttempt - GET parameter (sql.rules)
 * 1:13514 <-> DISABLED <-> SQL generic sql update injection attempt - GET parameter (sql.rules)
 * 1:13523 <-> DISABLED <-> WEB-ACTIVEX Novell iPrint ActiveX clsid access (web-activex.rules)
 * 1:13525 <-> DISABLED <-> WEB-ACTIVEX Novell iPrint ActiveX function call access (web-activex.rules)
 * 1:13527 <-> DISABLED <-> WEB-ACTIVEX D-Link MPEG4 SHM Audio Control ActiveX clsid access (web-activex.rules)
 * 1:13531 <-> DISABLED <-> WEB-ACTIVEX 4xem VatCtrl ActiveX clsid access (web-activex.rules)
 * 1:13535 <-> DISABLED <-> WEB-ACTIVEX Vivotek RTSP MPEG4 SP Control ActiveX clsid access (web-activex.rules)
 * 1:13539 <-> DISABLED <-> WEB-ACTIVEX Symantec Backup Exec ActiveX clsid access (web-activex.rules)
 * 1:13543 <-> DISABLED <-> WEB-ACTIVEX Learn2 STRunner ActiveX clsid access (web-activex.rules)
 * 1:13547 <-> DISABLED <-> WEB-ACTIVEX Sony ImageStation ActiveX clsid access (web-activex.rules)
 * 1:13585 <-> ENABLED <-> FILE-IDENTIFY Microsoft SYmbolic LinK file magic detected (file-identify.rules)
 * 1:13595 <-> DISABLED <-> WEB-ACTIVEX ICQ Toolbar toolbaru.dll ActiveX clsid access (web-activex.rules)
 * 1:13599 <-> DISABLED <-> WEB-ACTIVEX Kingsoft Antivirus Online Update Module ActiveX clsid access (web-activex.rules)
 * 1:13607 <-> DISABLED <-> WEB-ACTIVEX RealNetworks RealPlayer RMOC3260.DLL Vulnerble Property ActiveX clsid access (web-activex.rules)
 * 1:13621 <-> DISABLED <-> WEB-ACTIVEX CA BrightStor ListCtrl ActiveX clsid access (web-activex.rules)
 * 1:13657 <-> DISABLED <-> WEB-ACTIVEX BusinessObjects RptViewerAx ActiveX clsid access (web-activex.rules)
 * 1:13661 <-> DISABLED <-> WEB-ACTIVEX VeralSoft HTTP File Upload ActiveX clsid access (web-activex.rules)
 * 1:13679 <-> DISABLED <-> WEB-ACTIVEX IBiz EBanking Integrator ActiveX clsid access (web-activex.rules)
 * 1:13681 <-> DISABLED <-> WEB-ACTIVEX CDNetworks Nefficient Download ActiveX clsid access (web-activex.rules)
 * 1:13685 <-> DISABLED <-> WEB-ACTIVEX Chilkat HTTP 1 ActiveX clsid access (web-activex.rules)
 * 1:13689 <-> DISABLED <-> WEB-ACTIVEX Chilkat HTTP 2 ActiveX clsid access (web-activex.rules)
 * 1:13699 <-> DISABLED <-> WEB-ACTIVEX CA DSM gui_cm_ctrls ActiveX clsid access (web-activex.rules)
 * 1:13720 <-> DISABLED <-> WEB-ACTIVEX HP eSupportDiagnostics 3 ActiveX clsid access (web-activex.rules)
 * 1:13722 <-> DISABLED <-> WEB-ACTIVEX HP eSupportDiagnostics 4 ActiveX clsid access (web-activex.rules)
 * 1:13724 <-> DISABLED <-> WEB-ACTIVEX HP eSupportDiagnostics 5 ActiveX clsid access (web-activex.rules)
 * 1:13726 <-> DISABLED <-> WEB-ACTIVEX HP eSupportDiagnostics 6 ActiveX clsid access (web-activex.rules)
 * 1:13728 <-> DISABLED <-> WEB-ACTIVEX HP eSupportDiagnostics 7 ActiveX clsid access (web-activex.rules)
 * 1:13730 <-> DISABLED <-> WEB-ACTIVEX HP eSupportDiagnostics 8 ActiveX clsid access (web-activex.rules)
 * 1:13732 <-> DISABLED <-> WEB-ACTIVEX HP eSupportDiagnostics 9 ActiveX clsid access (web-activex.rules)
 * 1:13734 <-> DISABLED <-> WEB-ACTIVEX HP eSupportDiagnostics 10 ActiveX clsid access (web-activex.rules)
 * 1:13736 <-> DISABLED <-> WEB-ACTIVEX HP eSupportDiagnostics 11 ActiveX clsid access (web-activex.rules)
 * 1:13738 <-> DISABLED <-> WEB-ACTIVEX HP eSupportDiagnostics 12 ActiveX clsid access (web-activex.rules)
 * 1:13740 <-> DISABLED <-> WEB-ACTIVEX HP eSupportDiagnostics 13 ActiveX clsid access (web-activex.rules)
 * 1:13742 <-> DISABLED <-> WEB-ACTIVEX HP eSupportDiagnostics 14 ActiveX clsid access (web-activex.rules)
 * 1:13744 <-> DISABLED <-> WEB-ACTIVEX HP eSupportDiagnostics 15 ActiveX clsid access (web-activex.rules)
 * 1:13746 <-> DISABLED <-> WEB-ACTIVEX HP eSupportDiagnostics 16 ActiveX clsid access (web-activex.rules)
 * 1:13748 <-> DISABLED <-> WEB-ACTIVEX HP eSupportDiagnostics 17 ActiveX clsid access (web-activex.rules)
 * 1:13750 <-> DISABLED <-> WEB-ACTIVEX HP eSupportDiagnostics 18 ActiveX clsid access (web-activex.rules)
 * 1:13752 <-> DISABLED <-> WEB-ACTIVEX HP eSupportDiagnostics 19 ActiveX clsid access (web-activex.rules)
 * 1:13754 <-> DISABLED <-> WEB-ACTIVEX HP eSupportDiagnostics 20 ActiveX clsid access (web-activex.rules)
 * 1:13756 <-> DISABLED <-> WEB-ACTIVEX HP eSupportDiagnostics 21 ActiveX clsid access (web-activex.rules)
 * 1:13758 <-> DISABLED <-> WEB-ACTIVEX Microsoft HeartbeatCtl ActiveX clsid access (web-activex.rules)
 * 1:13783 <-> DISABLED <-> WEB-ACTIVEX Yahoo Assistant ActiveX clsid access (web-activex.rules)
 * 1:13785 <-> DISABLED <-> WEB-ACTIVEX Ourgame GLWorld ActiveX clsid access (web-activex.rules)
 * 1:1380 <-> DISABLED <-> WEB-IIS Form_VBScript.asp access (web-iis.rules)
 * 1:13847 <-> DISABLED <-> SPYWARE-PUT Adware phoenician casino runtime detection (spyware-put.rules)
 * 1:13857 <-> DISABLED <-> WEB-ACTIVEX HP Instant Support DataManager ActiveX clsid access (web-activex.rules)
 * 1:13862 <-> DISABLED <-> POLICY-SOCIAL Habbo chat client item information download (policy-social.rules)
 * 1:13883 <-> DISABLED <-> WEB-ACTIVEX UUSee UUUpgrade ActiveX clsid access (web-activex.rules)
 * 1:13903 <-> DISABLED <-> WEB-ACTIVEX Microsoft Access Snapshot Viewer 1 ActiveX clsid access (web-activex.rules)
 * 1:13907 <-> DISABLED <-> WEB-ACTIVEX Microsoft Access Snapshot Viewer 2 ActiveX clsid access (web-activex.rules)
 * 1:1392 <-> DISABLED <-> WEB-CGI lastlines.cgi access (web-cgi.rules)
 * 1:13938 <-> DISABLED <-> SPYWARE-PUT Hijacker adware.win32.ejik.ec variant runtime detection (spyware-put.rules)
 * 1:13943 <-> DISABLED <-> SPYWARE-PUT Trickler dropper agent.rqg runtime detection (spyware-put.rules)
 * 1:1400 <-> DISABLED <-> WEB-IIS /scripts/samples/ access (web-iis.rules)
 * 1:1401 <-> DISABLED <-> WEB-IIS /msadc/samples/ access (web-iis.rules)
 * 1:14013 <-> DISABLED <-> WEB-ACTIVEX WebEx Meeting Manager atucfobj ActiveX clsid access (web-activex.rules)
 * 1:1402 <-> DISABLED <-> WEB-IIS iissamples access (web-iis.rules)
 * 1:14021 <-> DISABLED <-> WEB-ACTIVEX Microsoft Visual Studio Msmask32 ActiveX clsid access (web-activex.rules)
 * 1:14023 <-> DISABLED <-> WEB-ACTIVEX Microsoft Visual Studio Msmask32 ActiveX function call access (web-activex.rules)
 * 1:14025 <-> DISABLED <-> WEB-ACTIVEX Computer Associates gui_cm_ctrls ActiveX clsid access (web-activex.rules)
 * 1:14029 <-> DISABLED <-> WEB-ACTIVEX Computer Associates gui_cm_ctrls ActiveX clsid access (web-activex.rules)
 * 1:14033 <-> DISABLED <-> WEB-ACTIVEX Orbit Downloader ActiveX clsid access (web-activex.rules)
 * 1:14037 <-> DISABLED <-> WEB-ACTIVEX Novell iPrint ActiveX operation or printer-url parameter overflow attempt (web-activex.rules)
 * 1:14038 <-> DISABLED <-> WEB-ACTIVEX Novell iPrint ActiveX target-frame parameter overflow attempt (web-activex.rules)
 * 1:14042 <-> DISABLED <-> WEB-ACTIVEX RealNetworks RealPlayer General Property Page ActiveX clsid access (web-activex.rules)
 * 1:1406 <-> DISABLED <-> WEB-CGI agora.cgi access (web-cgi.rules)
 * 1:14088 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 1 ActiveX clsid access (web-activex.rules)
 * 1:14090 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 2 ActiveX clsid access (web-activex.rules)
 * 1:14092 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 3 ActiveX clsid access (web-activex.rules)
 * 1:14094 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 4 ActiveX clsid access (web-activex.rules)
 * 1:14096 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 5 ActiveX clsid access (web-activex.rules)
 * 1:14098 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 6 ActiveX clsid access (web-activex.rules)
 * 1:14100 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 7 ActiveX clsid access (web-activex.rules)
 * 1:14102 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 8 ActiveX clsid access (web-activex.rules)
 * 1:14104 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 9 ActiveX clsid access (web-activex.rules)
 * 1:14106 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 10 ActiveX clsid access (web-activex.rules)
 * 1:14108 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 11 ActiveX clsid access (web-activex.rules)
 * 1:14110 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 12 ActiveX clsid access (web-activex.rules)
 * 1:14112 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 13 ActiveX clsid access (web-activex.rules)
 * 1:14114 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 14 ActiveX clsid access (web-activex.rules)
 * 1:14116 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 15 ActiveX clsid access (web-activex.rules)
 * 1:14118 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 16 ActiveX clsid access (web-activex.rules)
 * 1:14120 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 17 ActiveX clsid access (web-activex.rules)
 * 1:14122 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 18 ActiveX clsid access (web-activex.rules)
 * 1:14124 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 19 ActiveX clsid access (web-activex.rules)
 * 1:14126 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 20 ActiveX clsid access (web-activex.rules)
 * 1:14128 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 21 ActiveX clsid access (web-activex.rules)
 * 1:14130 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 22 ActiveX clsid access (web-activex.rules)
 * 1:14132 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 23 ActiveX clsid access (web-activex.rules)
 * 1:14134 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 24 ActiveX clsid access (web-activex.rules)
 * 1:14136 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 25 ActiveX clsid access (web-activex.rules)
 * 1:14138 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 26 ActiveX clsid access (web-activex.rules)
 * 1:14140 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 27 ActiveX clsid access (web-activex.rules)
 * 1:14142 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 28 ActiveX clsid access (web-activex.rules)
 * 1:14144 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 29 ActiveX clsid access (web-activex.rules)
 * 1:14146 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 30 ActiveX clsid access (web-activex.rules)
 * 1:14148 <-> ENABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 31 ActiveX clsid access (web-activex.rules)
 * 1:14150 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 32 ActiveX clsid access (web-activex.rules)
 * 1:14152 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 33 ActiveX clsid access (web-activex.rules)
 * 1:14154 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 34 ActiveX clsid access (web-activex.rules)
 * 1:14156 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 35 ActiveX clsid access (web-activex.rules)
 * 1:14158 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 36 ActiveX clsid access (web-activex.rules)
 * 1:14160 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 37 ActiveX clsid access (web-activex.rules)
 * 1:14162 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 38 ActiveX clsid access (web-activex.rules)
 * 1:14164 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 39 ActiveX clsid access (web-activex.rules)
 * 1:14166 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 40 ActiveX clsid access (web-activex.rules)
 * 1:14168 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 41 ActiveX clsid access (web-activex.rules)
 * 1:14170 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 42 ActiveX clsid access (web-activex.rules)
 * 1:14172 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 43 ActiveX clsid access (web-activex.rules)
 * 1:14174 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 44 ActiveX clsid access (web-activex.rules)
 * 1:14176 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 45 ActiveX clsid access (web-activex.rules)
 * 1:14178 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 46 ActiveX clsid access (web-activex.rules)
 * 1:14180 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 47 ActiveX clsid access (web-activex.rules)
 * 1:14182 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 48 ActiveX clsid access (web-activex.rules)
 * 1:14184 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 49 ActiveX clsid access (web-activex.rules)
 * 1:14186 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 50 ActiveX clsid access (web-activex.rules)
 * 1:14188 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 51 ActiveX clsid access (web-activex.rules)
 * 1:14190 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 52 ActiveX clsid access (web-activex.rules)
 * 1:14192 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 53 ActiveX clsid access (web-activex.rules)
 * 1:14194 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 54 ActiveX clsid access (web-activex.rules)
 * 1:14196 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 55 ActiveX clsid access (web-activex.rules)
 * 1:14198 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 56 ActiveX clsid access (web-activex.rules)
 * 1:14200 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 57 ActiveX clsid access (web-activex.rules)
 * 1:14202 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 58 ActiveX clsid access (web-activex.rules)
 * 1:14204 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 59 ActiveX clsid access (web-activex.rules)
 * 1:14206 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 60 ActiveX clsid access (web-activex.rules)
 * 1:14208 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 61 ActiveX clsid access (web-activex.rules)
 * 1:14210 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 62 ActiveX clsid access (web-activex.rules)
 * 1:14212 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 63 ActiveX clsid access (web-activex.rules)
 * 1:14214 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 64 ActiveX clsid access (web-activex.rules)
 * 1:14216 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 65 ActiveX clsid access (web-activex.rules)
 * 1:14218 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 66 ActiveX clsid access (web-activex.rules)
 * 1:14220 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 67 ActiveX clsid access (web-activex.rules)
 * 1:14222 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 68 ActiveX clsid access (web-activex.rules)
 * 1:14224 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 69 ActiveX clsid access (web-activex.rules)
 * 1:14226 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 70 ActiveX clsid access (web-activex.rules)
 * 1:14228 <-> DISABLED <-> WEB-ACTIVEX Aurigma Image Uploader unspecified 71 ActiveX clsid access (web-activex.rules)
 * 1:14231 <-> DISABLED <-> WEB-ACTIVEX SoftArtisans XFile FileManager ActiveX clsid access (web-activex.rules)
 * 1:14235 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Media Services ActiveX clsid access (web-activex.rules)
 * 1:14239 <-> DISABLED <-> WEB-ACTIVEX Friendly Technologies fwRemoteConfig ActiveX clsid access (web-activex.rules)
 * 1:14243 <-> DISABLED <-> WEB-ACTIVEX Najdi.si Toolbar ActiveX clsid access (web-activex.rules)
 * 1:14247 <-> DISABLED <-> WEB-ACTIVEX Eyeball MessengerSDK ActiveX clsid access (web-activex.rules)
 * 1:14266 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Image Acquisition Logger ActiveX clsid access (web-activex.rules)
 * 1:14270 <-> DISABLED <-> WEB-ACTIVEX VieLib2.Vie2Locator ActiveX clsid access (web-activex.rules)
 * 1:14274 <-> DISABLED <-> WEB-ACTIVEX Vie2Lib.Vie2LinuxVolume ActiveX clsid access (web-activex.rules)
 * 1:14278 <-> DISABLED <-> WEB-ACTIVEX VieLib2.Vie2Process ActiveX clsid access (web-activex.rules)
 * 1:14282 <-> DISABLED <-> WEB-ACTIVEX IntraProcessLogging.Logger ActiveX clsid access (web-activex.rules)
 * 1:14286 <-> DISABLED <-> WEB-ACTIVEX VMClientHosts Class ActiveX clsid access (web-activex.rules)
 * 1:14290 <-> DISABLED <-> WEB-ACTIVEX VhdCvtCom.DiskLibCreateParamObj ActiveX clsid access (web-activex.rules)
 * 1:14294 <-> DISABLED <-> WEB-ACTIVEX RemoteDirDlg Class ActiveX clsid access (web-activex.rules)
 * 1:14298 <-> DISABLED <-> WEB-ACTIVEX TeamListViewWnd Class ActiveX clsid access (web-activex.rules)
 * 1:14302 <-> DISABLED <-> WEB-ACTIVEX VMStatusbarCtl Class ActiveX clsid access (web-activex.rules)
 * 1:14306 <-> DISABLED <-> WEB-ACTIVEX Vmc2vmx.CoVPCConfiguration ActiveX clsid access (web-activex.rules)
 * 1:14310 <-> DISABLED <-> WEB-ACTIVEX VmdbUpdate Class ActiveX clsid access (web-activex.rules)
 * 1:14314 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 1 ActiveX clsid access (web-activex.rules)
 * 1:14316 <-> DISABLED <-> WEB-ACTIVEX VmdbExecuteError Class ActiveX clsid access (web-activex.rules)
 * 1:14320 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 2 ActiveX clsid access (web-activex.rules)
 * 1:14322 <-> DISABLED <-> WEB-ACTIVEX reconfig.SysImageUti ActiveX clsid access (web-activex.rules)
 * 1:14326 <-> DISABLED <-> WEB-ACTIVEX Microsoft Visual Database Tools Query Designer V7.0 ActiveX clsid access (web-activex.rules)
 * 1:14330 <-> DISABLED <-> WEB-ACTIVEX VmdbContext Class ActiveX clsid access (web-activex.rules)
 * 1:14334 <-> DISABLED <-> WEB-ACTIVEX VMClientVMs Class ActiveX clsid access (web-activex.rules)
 * 1:14338 <-> DISABLED <-> WEB-ACTIVEX vmappPropObj Class ActiveX clsid access (web-activex.rules)
 * 1:14342 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 3 ActiveX clsid access (web-activex.rules)
 * 1:14344 <-> DISABLED <-> WEB-ACTIVEX VMMsg Class ActiveX clsid access (web-activex.rules)
 * 1:14348 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 4 ActiveX clsid access (web-activex.rules)
 * 1:14350 <-> DISABLED <-> WEB-ACTIVEX reconfig.PopulatedDi ActiveX clsid access (web-activex.rules)
 * 1:14354 <-> DISABLED <-> WEB-ACTIVEX Elevated.ElevMgr ActiveX clsid access (web-activex.rules)
 * 1:14358 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 5 ActiveX clsid access (web-activex.rules)
 * 1:14360 <-> DISABLED <-> WEB-ACTIVEX HardwareCtl Class ActiveX clsid access (web-activex.rules)
 * 1:14364 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 6 ActiveX clsid access (web-activex.rules)
 * 1:14366 <-> DISABLED <-> WEB-ACTIVEX VmdbQuery Class ActiveX clsid access (web-activex.rules)
 * 1:1437 <-> DISABLED <-> FILE-IDENTIFY Microsoft Windows Media download detected (file-identify.rules)
 * 1:14370 <-> DISABLED <-> WEB-ACTIVEX vmappPropObj2 Class ActiveX clsid access (web-activex.rules)
 * 1:14374 <-> DISABLED <-> WEB-ACTIVEX VmappPoll Class ActiveX clsid access (web-activex.rules)
 * 1:14378 <-> DISABLED <-> WEB-ACTIVEX VMClient Class ActiveX clsid access (web-activex.rules)
 * 1:14382 <-> DISABLED <-> WEB-ACTIVEX Pq2vcom.Pq2v ActiveX clsid access (web-activex.rules)
 * 1:14386 <-> DISABLED <-> WEB-ACTIVEX VmdbSchema Class ActiveX clsid access (web-activex.rules)
 * 1:1439 <-> DISABLED <-> POLICY-MULTIMEDIA Shoutcast playlist redirection (policy-multimedia.rules)
 * 1:14394 <-> DISABLED <-> WEB-ACTIVEX VixCOM.VixLib ActiveX clsid access (web-activex.rules)
 * 1:14398 <-> DISABLED <-> WEB-ACTIVEX vmappsdk.CuiObj ActiveX clsid access (web-activex.rules)
 * 1:1440 <-> DISABLED <-> POLICY-MULTIMEDIA Icecast playlist redirection (policy-multimedia.rules)
 * 1:14402 <-> DISABLED <-> WEB-ACTIVEX RemoteBrowseDlg Class ActiveX clsid access (web-activex.rules)
 * 1:14406 <-> DISABLED <-> WEB-ACTIVEX RegVmsCtl Class ActiveX clsid access (web-activex.rules)
 * 1:14410 <-> DISABLED <-> WEB-ACTIVEX VmdbEnumTags Class ActiveX clsid access (web-activex.rules)
 * 1:14414 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 7 ActiveX clsid access (web-activex.rules)
 * 1:14420 <-> DISABLED <-> WEB-ACTIVEX VmdbDatabase Class ActiveX clsid access (web-activex.rules)
 * 1:14424 <-> DISABLED <-> WEB-ACTIVEX VMAppSdkUtil Class ActiveX clsid access (web-activex.rules)
 * 1:14428 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 8 ActiveX clsid access (web-activex.rules)
 * 1:14430 <-> DISABLED <-> WEB-ACTIVEX VMEnumStrings Class ActiveX clsid access (web-activex.rules)
 * 1:14434 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 9 ActiveX clsid access (web-activex.rules)
 * 1:14436 <-> DISABLED <-> WEB-ACTIVEX VMClientHost Class ActiveX clsid access (web-activex.rules)
 * 1:14440 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 10 ActiveX clsid access (web-activex.rules)
 * 1:14442 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 11 ActiveX clsid access (web-activex.rules)
 * 1:14444 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 12 ActiveX clsid access (web-activex.rules)
 * 1:14446 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 13 ActiveX clsid access (web-activex.rules)
 * 1:14448 <-> DISABLED <-> WEB-ACTIVEX reconfig.SystemReconfigur ActiveX clsid access (web-activex.rules)
 * 1:14452 <-> DISABLED <-> WEB-ACTIVEX vmhwcfg.NwzCompleted ActiveX clsid access (web-activex.rules)
 * 1:14456 <-> DISABLED <-> WEB-ACTIVEX MksCompatCtl Class ActiveX clsid access (web-activex.rules)
 * 1:14460 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 14 ActiveX clsid access (web-activex.rules)
 * 1:14466 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 15 ActiveX clsid access (web-activex.rules)
 * 1:14468 <-> DISABLED <-> WEB-ACTIVEX Elevated.HostDeviceInfos ActiveX clsid access (web-activex.rules)
 * 1:14472 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 16 ActiveX clsid access (web-activex.rules)
 * 1:14474 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 17 ActiveX clsid access (web-activex.rules)
 * 1:14476 <-> DISABLED <-> WEB-ACTIVEX reconfig.GuestInfo ActiveX clsid access (web-activex.rules)
 * 1:14480 <-> DISABLED <-> WEB-ACTIVEX VmappPropFrame Class ActiveX clsid access (web-activex.rules)
 * 1:14484 <-> DISABLED <-> WEB-ACTIVEX VhdCvtCom.VhdConverter ActiveX clsid access (web-activex.rules)
 * 1:14488 <-> DISABLED <-> WEB-ACTIVEX VMSwitchCtl Class ActiveX clsid access (web-activex.rules)
 * 1:14492 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 18 ActiveX clsid access (web-activex.rules)
 * 1:14494 <-> DISABLED <-> WEB-ACTIVEX VmdbUtil Class ActiveX clsid access (web-activex.rules)
 * 1:14498 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 19 ActiveX clsid access (web-activex.rules)
 * 1:14500 <-> DISABLED <-> WEB-ACTIVEX VMwareVpcCvt.VpcC ActiveX clsid access (web-activex.rules)
 * 1:14504 <-> DISABLED <-> WEB-ACTIVEX VmdbCnxUtil Class ActiveX clsid access (web-activex.rules)
 * 1:14508 <-> DISABLED <-> WEB-ACTIVEX Vmc2vmx.CoVPCDrive ActiveX clsid access (web-activex.rules)
 * 1:1451 <-> DISABLED <-> WEB-CGI NPH-maillist access (web-cgi.rules)
 * 1:14512 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 20 ActiveX clsid access (web-activex.rules)
 * 1:14514 <-> DISABLED <-> WEB-ACTIVEX VMClientVM Class ActiveX clsid access (web-activex.rules)
 * 1:14518 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 21 ActiveX clsid access (web-activex.rules)
 * 1:1452 <-> DISABLED <-> WEB-CGI args.cmd access (web-cgi.rules)
 * 1:14520 <-> DISABLED <-> WEB-ACTIVEX Elevated.VMXCreator ActiveX clsid access (web-activex.rules)
 * 1:14524 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 22 ActiveX clsid access (web-activex.rules)
 * 1:14526 <-> DISABLED <-> WEB-ACTIVEX HotfixWz Class ActiveX clsid access (web-activex.rules)
 * 1:1453 <-> DISABLED <-> WEB-CGI AT-generated.cgi access (web-cgi.rules)
 * 1:14530 <-> DISABLED <-> WEB-ACTIVEX VmdbUpdates Class ActiveX clsid access (web-activex.rules)
 * 1:14534 <-> DISABLED <-> WEB-ACTIVEX VMListCtl Class ActiveX clsid access (web-activex.rules)
 * 1:14538 <-> DISABLED <-> WEB-ACTIVEX CheckedListViewWnd Class ActiveX clsid access (web-activex.rules)
 * 1:1454 <-> DISABLED <-> WEB-CGI wwwwais access (web-cgi.rules)
 * 1:14542 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 23 ActiveX clsid access (web-activex.rules)
 * 1:14544 <-> DISABLED <-> WEB-ACTIVEX VmdbTreeCtl Class ActiveX clsid access (web-activex.rules)
 * 1:14548 <-> DISABLED <-> WEB-ACTIVEX Nwz Class ActiveX clsid access (web-activex.rules)
 * 1:1455 <-> DISABLED <-> WEB-CGI calendar.pl access (web-cgi.rules)
 * 1:14552 <-> DISABLED <-> WEB-ACTIVEX Vmc2vmx.CoVPCDrives ActiveX clsid access (web-activex.rules)
 * 1:14556 <-> DISABLED <-> WEB-ACTIVEX MksCtl Class ActiveX clsid access (web-activex.rules)
 * 1:1456 <-> DISABLED <-> WEB-CGI calender_admin.pl access (web-cgi.rules)
 * 1:14560 <-> DISABLED <-> WEB-ACTIVEX VmappPropPath Class ActiveX clsid access (web-activex.rules)
 * 1:14564 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 24 ActiveX clsid access (web-activex.rules)
 * 1:14566 <-> DISABLED <-> WEB-ACTIVEX PolicyCtl Class ActiveX clsid access (web-activex.rules)
 * 1:1457 <-> DISABLED <-> WEB-CGI user_update_admin.pl access (web-cgi.rules)
 * 1:14570 <-> DISABLED <-> WEB-ACTIVEX VmdbParseError Class ActiveX clsid access (web-activex.rules)
 * 1:14574 <-> DISABLED <-> WEB-ACTIVEX NavigationCtl Class ActiveX clsid access (web-activex.rules)
 * 1:14578 <-> DISABLED <-> WEB-ACTIVEX VMList Class ActiveX clsid access (web-activex.rules)
 * 1:1458 <-> DISABLED <-> WEB-CGI user_update_passwd.pl access (web-cgi.rules)
 * 1:14582 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 25 ActiveX clsid access (web-activex.rules)
 * 1:14584 <-> DISABLED <-> WEB-ACTIVEX VMWare unspecified 26 ActiveX clsid access (web-activex.rules)
 * 1:14586 <-> DISABLED <-> WEB-ACTIVEX CurrentVMCtl Class ActiveX clsid access (web-activex.rules)
 * 1:1459 <-> DISABLED <-> WEB-CGI bb-histlog.sh access (web-cgi.rules)
 * 1:14590 <-> DISABLED <-> WEB-ACTIVEX VhdCvtCom.DiskLibHelper ActiveX clsid access (web-activex.rules)
 * 1:14594 <-> DISABLED <-> WEB-ACTIVEX Peachtree Accounting 2004 ActiveX clsid access (web-activex.rules)
 * 1:14596 <-> DISABLED <-> WEB-ACTIVEX ComponentOne VSFlexGrid ActiveX clsid access (web-activex.rules)
 * 1:1460 <-> DISABLED <-> WEB-CGI bb-histsvc.sh access (web-cgi.rules)
 * 1:14603 <-> DISABLED <-> WEB-ACTIVEX Data Dynamics ActiveReport ARViewer2 ActiveX clsid access (web-activex.rules)
 * 1:1461 <-> DISABLED <-> WEB-CGI bb-rep.sh access (web-cgi.rules)
 * 1:14611 <-> ENABLED <-> WEB-ACTIVEX VMWare VMCtl Class ActiveX clsid access (web-activex.rules)
 * 1:1462 <-> DISABLED <-> WEB-CGI bb-replog.sh access (web-cgi.rules)
 * 1:1463 <-> DISABLED <-> POLICY-SOCIAL IRC message (policy-social.rules)
 * 1:14631 <-> DISABLED <-> WEB-ACTIVEX SystemRequirementsLab ActiveX clsid access (web-activex.rules)
 * 1:14633 <-> DISABLED <-> WEB-ACTIVEX PhotoStockPlus ActiveX clsid access (web-activex.rules)
 * 1:14635 <-> DISABLED <-> WEB-ACTIVEX Microsoft RSClientPrint ActiveX clsid access (web-activex.rules)
 * 1:14637 <-> DISABLED <-> WEB-ACTIVEX Microsoft PicturePusher ActiveX clsid access (web-activex.rules)
 * 1:1465 <-> DISABLED <-> WEB-CGI auktion.cgi access (web-cgi.rules)
 * 1:1466 <-> DISABLED <-> WEB-CGI cgiforum.pl access (web-cgi.rules)
 * 1:1467 <-> DISABLED <-> WEB-CGI directorypro.cgi access (web-cgi.rules)
 * 1:1469 <-> DISABLED <-> WEB-CGI Web Shopper shopper.cgi access (web-cgi.rules)
 * 1:1470 <-> DISABLED <-> WEB-CGI listrec.pl access (web-cgi.rules)
 * 1:1471 <-> DISABLED <-> WEB-CGI mailnews.cgi access (web-cgi.rules)
 * 1:1472 <-> DISABLED <-> WEB-CGI book.cgi access (web-cgi.rules)
 * 1:1474 <-> DISABLED <-> WEB-CGI cal_make.pl access (web-cgi.rules)
 * 1:14744 <-> DISABLED <-> WEB-ACTIVEX Hummingbird HostExplorer ActiveX clsid access (web-activex.rules)
 * 1:14746 <-> DISABLED <-> WEB-ACTIVEX Autodesk DWF Viewer ActiveX clsid access (web-activex.rules)
 * 1:14748 <-> ENABLED <-> WEB-ACTIVEX Autodesk LiveUpdate ActiveX clsid access (web-activex.rules)
 * 1:1475 <-> DISABLED <-> WEB-CGI mailit.pl access (web-cgi.rules)
 * 1:14752 <-> DISABLED <-> WEB-ACTIVEX Novell ZENworks Desktop Management ActiveX clsid access (web-activex.rules)
 * 1:14756 <-> ENABLED <-> WEB-ACTIVEX Microsoft SQL Server 2000 Client Components ActiveX clsid access (web-activex.rules)
 * 1:1476 <-> DISABLED <-> WEB-CGI sdbsearch.cgi access (web-cgi.rules)
 * 1:14760 <-> DISABLED <-> WEB-ACTIVEX iseemedia LPViewer ActiveX clsid access (web-activex.rules)
 * 1:14764 <-> ENABLED <-> WEB-ACTIVEX Macrovision InstallShield Update Service Agent ActiveX clsid access (web-activex.rules)
 * 1:14765 <-> ENABLED <-> WEB-ACTIVEX Macrovision InstallShield Update Service Agent ActiveX function call (web-activex.rules)
 * 1:14778 <-> DISABLED <-> WEB-ACTIVEX Dart Communications PowerTCP FTP ActiveX clsid access (web-activex.rules)
 * 1:1478 <-> DISABLED <-> WEB-CGI swc access (web-cgi.rules)
 * 1:1480 <-> DISABLED <-> WEB-CGI ttawebtop.cgi access (web-cgi.rules)
 * 1:1481 <-> DISABLED <-> WEB-CGI upload.cgi access (web-cgi.rules)
 * 1:1482 <-> DISABLED <-> WEB-CGI view_source access (web-cgi.rules)
 * 1:1483 <-> DISABLED <-> WEB-CGI ustorekeeper.pl access (web-cgi.rules)
 * 1:1485 <-> DISABLED <-> WEB-IIS mkilog.exe access (web-iis.rules)
 * 1:1486 <-> DISABLED <-> WEB-IIS ctss.idc access (web-iis.rules)
 * 1:1487 <-> DISABLED <-> WEB-IIS /iisadmpwd/aexp2.htr access (web-iis.rules)
 * 1:14993 <-> DISABLED <-> WEB-ACTIVEX Visagesoft eXPert PDF Viewer ActiveX clsid access (web-activex.rules)
 * 1:14997 <-> DISABLED <-> WEB-ACTIVEX DjVu MSOffice Converter ActiveX clsid access (web-activex.rules)
 * 1:14999 <-> DISABLED <-> WEB-ACTIVEX Microsoft Debug Diagnostic Tool ActiveX clsid access (web-activex.rules)
 * 1:15003 <-> DISABLED <-> WEB-ACTIVEX Chilkat Crypt 2 ActiveX clsid access (web-activex.rules)
 * 1:15007 <-> DISABLED <-> WEB-ACTIVEX NOS Microsystems / Adobe getPlus Download Manager ActiveX clsid access (web-activex.rules)
 * 1:15069 <-> DISABLED <-> WEB-ACTIVEX SAP AG SAPgui mdrmsap ActiveX clsid access (web-activex.rules)
 * 1:15104 <-> ENABLED <-> WEB-CLIENT Microsoft Windows Visual Basic 6.0 malformed AVI buffer overflow attempt (web-client.rules)
 * 1:15109 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Shell.Explorer 1 ActiveX clsid access (web-activex.rules)
 * 1:15112 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Shell.Explorer 2 ActiveX function call access (web-activex.rules)
 * 1:15122 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Shell.Explorer 2 ActiveX clsid access (web-activex.rules)
 * 1:15126 <-> ENABLED <-> WEB-CLIENT Microsoft Internet Explorer nested tag memory corruption attempt (web-client.rules)
 * 1:15159 <-> DISABLED <-> WEB-ACTIVEX Evans FTP ActiveX clsid access (web-activex.rules)
 * 1:15161 <-> DISABLED <-> WEB-ACTIVEX Evans FTP ActiveX function call access (web-activex.rules)
 * 1:15173 <-> DISABLED <-> WEB-ACTIVEX Phoenician Casino ActiveX clsid access (web-activex.rules)
 * 1:15175 <-> DISABLED <-> WEB-ACTIVEX Phoenician Casino ActiveX function call access (web-activex.rules)
 * 1:15177 <-> DISABLED <-> WEB-ACTIVEX Trend Micro HouseCall ActiveX clsid access (web-activex.rules)
 * 1:15179 <-> DISABLED <-> WEB-ACTIVEX Trend Micro HouseCall ActiveX function call access (web-activex.rules)
 * 1:15181 <-> DISABLED <-> WEB-ACTIVEX SaschArt SasCam Webcam Server ActiveX clsid access (web-activex.rules)
 * 1:15192 <-> DISABLED <-> WEB-ACTIVEX SizerOne ActiveX clsid access (web-activex.rules)
 * 1:15194 <-> DISABLED <-> WEB-ACTIVEX SizerOne ActiveX function call access (web-activex.rules)
 * 1:15228 <-> DISABLED <-> WEB-ACTIVEX Ciansoft PDFBuilderX ActiveX clsid access (web-activex.rules)
 * 1:15230 <-> ENABLED <-> WEB-ACTIVEX Microsoft Office Viewer 2 ActiveX clsid access (web-activex.rules)
 * 1:15232 <-> DISABLED <-> WEB-ACTIVEX Easy Grid ActiveX clsid access (web-activex.rules)
 * 1:15234 <-> DISABLED <-> WEB-ACTIVEX Easy Grid ActiveX function call access (web-activex.rules)
 * 1:15245 <-> DISABLED <-> WEB-ACTIVEX AXIS Camera ActiveX function call access (web-activex.rules)
 * 1:15247 <-> DISABLED <-> WEB-ACTIVEX JamDTA ActiveX clsid access (web-activex.rules)
 * 1:15249 <-> DISABLED <-> WEB-ACTIVEX SmartVMD ActiveX clsid access (web-activex.rules)
 * 1:15251 <-> DISABLED <-> WEB-ACTIVEX MetaProducts MetaTreeX ActiveX clsid access (web-activex.rules)
 * 1:15253 <-> DISABLED <-> WEB-ACTIVEX MetaProducts MetaTreeX ActiveX function call access (web-activex.rules)
 * 1:15266 <-> DISABLED <-> WEB-ACTIVEX MW6 Technologies Barcode ActiveX clsid access (web-activex.rules)
 * 1:15268 <-> DISABLED <-> WEB-ACTIVEX MW6 Technologies Barcode ActiveX function call access (web-activex.rules)
 * 1:15270 <-> DISABLED <-> WEB-ACTIVEX MW6 Technologies PDF417 ActiveX clsid access (web-activex.rules)
 * 1:15272 <-> DISABLED <-> WEB-ACTIVEX MW6 Technologies PDF417 ActiveX function call access (web-activex.rules)
 * 1:15274 <-> DISABLED <-> WEB-ACTIVEX MW6 Technologies DataMatrix ActiveX clsid access (web-activex.rules)
 * 1:15276 <-> DISABLED <-> WEB-ACTIVEX MW6 Technologies DataMatrix ActiveX function call access (web-activex.rules)
 * 1:15278 <-> DISABLED <-> WEB-ACTIVEX MW6 Technologies Aztec ActiveX clsid access (web-activex.rules)
 * 1:15280 <-> DISABLED <-> WEB-ACTIVEX MW6 Technologies Aztec ActiveX function call access (web-activex.rules)
 * 1:15282 <-> DISABLED <-> WEB-ACTIVEX FlexCell Grid ActiveX clsid access (web-activex.rules)
 * 1:15284 <-> DISABLED <-> WEB-ACTIVEX NCTAudioGrabber2 ActiveX clsid access (web-activex.rules)
 * 1:15286 <-> DISABLED <-> WEB-ACTIVEX NCTAudioGrabber2 ActiveX function call access (web-activex.rules)
 * 1:15288 <-> DISABLED <-> WEB-ACTIVEX NCTAudioInformation2 ActiveX clsid access (web-activex.rules)
 * 1:15290 <-> DISABLED <-> WEB-ACTIVEX NCTAudioInformation2 ActiveX function call access (web-activex.rules)
 * 1:15307 <-> DISABLED <-> WEB-ACTIVEX Microsoft Animation Control ActiveX clsid access (web-activex.rules)
 * 1:15309 <-> DISABLED <-> WEB-ACTIVEX Microsoft Animation Control ActiveX function call access (web-activex.rules)
 * 1:1531 <-> DISABLED <-> WEB-CGI bb-hist.sh attempt (web-cgi.rules)
 * 1:15311 <-> ENABLED <-> WEB-ACTIVEX Research In Motion AxLoader ActiveX clsid access (web-activex.rules)
 * 1:15313 <-> DISABLED <-> WEB-ACTIVEX Research In Motion AxLoader ActiveX function call access (web-activex.rules)
 * 1:15315 <-> DISABLED <-> WEB-ACTIVEX Akamai DownloadManager ActiveX clsid access (web-activex.rules)
 * 1:15317 <-> DISABLED <-> WEB-ACTIVEX Akamai DownloadManager ActiveX function call access (web-activex.rules)
 * 1:1532 <-> DISABLED <-> WEB-CGI bb-hostscv.sh attempt (web-cgi.rules)
 * 1:1533 <-> DISABLED <-> WEB-CGI bb-hostscv.sh access (web-cgi.rules)
 * 1:15330 <-> DISABLED <-> WEB-ACTIVEX Nokia Phoenix Service 1 ActiveX clsid access (web-activex.rules)
 * 1:15332 <-> DISABLED <-> WEB-ACTIVEX Nokia Phoenix Service 2 ActiveX clsid access (web-activex.rules)
 * 1:15334 <-> DISABLED <-> WEB-ACTIVEX GeoVision LiveX 7000 ActiveX clsid access (web-activex.rules)
 * 1:15336 <-> DISABLED <-> WEB-ACTIVEX GeoVision LiveX 7000 ActiveX function call access (web-activex.rules)
 * 1:15338 <-> DISABLED <-> WEB-ACTIVEX GeoVision LiveX 8120 ActiveX clsid access (web-activex.rules)
 * 1:1534 <-> DISABLED <-> WEB-CGI agora.cgi attempt (web-cgi.rules)
 * 1:15340 <-> DISABLED <-> WEB-ACTIVEX GeoVision LiveX 8120 ActiveX function call access (web-activex.rules)
 * 1:15342 <-> DISABLED <-> WEB-ACTIVEX GeoVision LiveX 8200 ActiveX clsid access (web-activex.rules)
 * 1:15344 <-> DISABLED <-> WEB-ACTIVEX GeoVision LiveX 8200 ActiveX function call access (web-activex.rules)
 * 1:15346 <-> DISABLED <-> WEB-ACTIVEX Synactis ALL In-The-Box ActiveX clsid access (web-activex.rules)
 * 1:15348 <-> DISABLED <-> WEB-ACTIVEX Synactis ALL In-The-Box ActiveX function call access (web-activex.rules)
 * 1:1535 <-> DISABLED <-> WEB-CGI bizdbsearch access (web-cgi.rules)
 * 1:15350 <-> DISABLED <-> WEB-ACTIVEX Web on Windows ActiveX clsid access (web-activex.rules)
 * 1:15352 <-> DISABLED <-> WEB-ACTIVEX Web on Windows ActiveX function call access (web-activex.rules)
 * 1:15368 <-> DISABLED <-> WEB-ACTIVEX FathFTP ActiveX clsid access (web-activex.rules)
 * 1:15370 <-> DISABLED <-> WEB-ACTIVEX FathFTP ActiveX function call access (web-activex.rules)
 * 1:15372 <-> DISABLED <-> WEB-ACTIVEX iDefense COMRaider ActiveX clsid access (web-activex.rules)
 * 1:15374 <-> DISABLED <-> WEB-ACTIVEX iDefense COMRaider ActiveX function call access (web-activex.rules)
 * 1:15376 <-> DISABLED <-> WEB-ACTIVEX Sopcast SopCore ActiveX clsid access (web-activex.rules)
 * 1:15378 <-> DISABLED <-> WEB-ACTIVEX Sopcast SopCore ActiveX function call access (web-activex.rules)
 * 1:15380 <-> DISABLED <-> WEB-ACTIVEX HP Virtual Rooms v7 ActiveX clsid access (web-activex.rules)
 * 1:1539 <-> DISABLED <-> WEB-CGI /cgi-bin/ls access (web-cgi.rules)
 * 1:1540 <-> DISABLED <-> WEB-COLDFUSION ?Mode=debug attempt (web-coldfusion.rules)
 * 1:1542 <-> DISABLED <-> WEB-CGI cgimail access (web-cgi.rules)
 * 1:1543 <-> DISABLED <-> WEB-CGI cgiwrap access (web-cgi.rules)
 * 1:15476 <-> DISABLED <-> SPYWARE-PUT Waledac spam bot HTTP POST request (spyware-put.rules)
 * 1:15478 <-> ENABLED <-> SPECIFIC-THREATS Adobe Flash Player invalid object reference code execution attempt (specific-threats.rules)
 * 1:15512 <-> ENABLED <-> NETBIOS DCERPC NCACN-IP-TCP rpcss2_RemoteGetClassObject attempt (netbios.rules)
 * 1:15543 <-> DISABLED <-> WEB-ACTIVEX Microsoft Communications Control v6 ActiveX clsid access (web-activex.rules)
 * 1:15545 <-> DISABLED <-> WEB-ACTIVEX Microsoft Communications Control v6 ActiveX function call access (web-activex.rules)
 * 1:15547 <-> DISABLED <-> WEB-ACTIVEX eBay Picture Uploads control 1 ActiveX clsid access (web-activex.rules)
 * 1:15549 <-> DISABLED <-> WEB-ACTIVEX eBay Picture Uploads control 1 ActiveX function call access (web-activex.rules)
 * 1:1555 <-> DISABLED <-> WEB-CGI DCShop access (web-cgi.rules)
 * 1:15551 <-> DISABLED <-> WEB-ACTIVEX eBay Picture Uploads control 2 ActiveX clsid access (web-activex.rules)
 * 1:15557 <-> DISABLED <-> WEB-ACTIVEX SAP AG SAPgui EnjoySAP ActiveX clsid access (web-activex.rules)
 * 1:1556 <-> DISABLED <-> WEB-CGI DCShop orders.txt access (web-cgi.rules)
 * 1:15566 <-> ENABLED <-> SPYWARE-PUT Gumblar HTTP GET request attempt (spyware-put.rules)
 * 1:15567 <-> ENABLED <-> SPYWARE-PUT Martuz HTTP GET request attempt (spyware-put.rules)
 * 1:1557 <-> DISABLED <-> WEB-CGI DCShop auth_user_file.txt access (web-cgi.rules)
 * 1:15575 <-> DISABLED <-> FILE-IDENTIFY WordPerfect file magic detected (file-identify.rules)
 * 1:15588 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 1 ActiveX clsid access (web-activex.rules)
 * 1:15590 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 10 ActiveX clsid access (web-activex.rules)
 * 1:15592 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 11 ActiveX clsid access (web-activex.rules)
 * 1:15594 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 12 ActiveX clsid access (web-activex.rules)
 * 1:15596 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 13 ActiveX clsid access (web-activex.rules)
 * 1:15598 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 14 ActiveX clsid access (web-activex.rules)
 * 1:15600 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 15 ActiveX clsid access (web-activex.rules)
 * 1:15602 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 16 ActiveX clsid access (web-activex.rules)
 * 1:15604 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 17 ActiveX clsid access (web-activex.rules)
 * 1:15606 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 18 ActiveX clsid access (web-activex.rules)
 * 1:15608 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 19 ActiveX clsid access (web-activex.rules)
 * 1:15610 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 2 ActiveX clsid access (web-activex.rules)
 * 1:15612 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 20 ActiveX clsid access (web-activex.rules)
 * 1:15614 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 21 ActiveX clsid access (web-activex.rules)
 * 1:15616 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 22 ActiveX clsid access (web-activex.rules)
 * 1:15618 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 23 ActiveX clsid access (web-activex.rules)
 * 1:15620 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 24 ActiveX clsid access (web-activex.rules)
 * 1:15622 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 25 ActiveX clsid access (web-activex.rules)
 * 1:15624 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 26 ActiveX clsid access (web-activex.rules)
 * 1:15626 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 27 ActiveX clsid access (web-activex.rules)
 * 1:15628 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 28 ActiveX clsid access (web-activex.rules)
 * 1:15630 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 29 ActiveX clsid access (web-activex.rules)
 * 1:15632 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 3 ActiveX clsid access (web-activex.rules)
 * 1:15634 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 30 ActiveX clsid access (web-activex.rules)
 * 1:15636 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 31 ActiveX clsid access (web-activex.rules)
 * 1:15638 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 32 ActiveX clsid access (web-activex.rules)
 * 1:15640 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 33 ActiveX clsid access (web-activex.rules)
 * 1:15642 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 34 ActiveX clsid access (web-activex.rules)
 * 1:15644 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 35 ActiveX clsid access (web-activex.rules)
 * 1:15646 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 36 ActiveX clsid access (web-activex.rules)
 * 1:15648 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 37 ActiveX clsid access (web-activex.rules)
 * 1:1565 <-> DISABLED <-> WEB-CGI eshop.pl arbitrary command execution attempt (web-cgi.rules)
 * 1:15650 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 38 ActiveX clsid access (web-activex.rules)
 * 1:15652 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 39 ActiveX clsid access (web-activex.rules)
 * 1:15654 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 4 ActiveX clsid access (web-activex.rules)
 * 1:15656 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 40 ActiveX clsid access (web-activex.rules)
 * 1:15658 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 41 ActiveX clsid access (web-activex.rules)
 * 1:1566 <-> DISABLED <-> WEB-CGI eshop.pl access (web-cgi.rules)
 * 1:15660 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 42 ActiveX clsid access (web-activex.rules)
 * 1:15662 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 43 ActiveX clsid access (web-activex.rules)
 * 1:15664 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 44 ActiveX clsid access (web-activex.rules)
 * 1:15666 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 45 ActiveX clsid access (web-activex.rules)
 * 1:15668 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 5 ActiveX clsid access (web-activex.rules)
 * 1:1567 <-> DISABLED <-> WEB-IIS /exchange/root.asp attempt (web-iis.rules)
 * 1:15670 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 6 ActiveX clsid access (web-activex.rules)
 * 1:15671 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 6 ActiveX function call (web-activex.rules)
 * 1:15672 <-> ENABLED <-> WEB-ACTIVEX Microsoft Video 7 ActiveX clsid access (web-activex.rules)
 * 1:15674 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 8 ActiveX clsid access (web-activex.rules)
 * 1:15676 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 9 ActiveX clsid access (web-activex.rules)
 * 1:1568 <-> DISABLED <-> WEB-IIS /exchange/root.asp access (web-iis.rules)
 * 1:1570 <-> DISABLED <-> WEB-CGI loadpage.cgi access (web-cgi.rules)
 * 1:15710 <-> ENABLED <-> NETBIOS DCERPC NCACN-IP-TCP brightstor opcode 0x3B null strings attempt (netbios.rules)
 * 1:15727 <-> ENABLED <-> FILE-PDF attempted download of a PDF with embedded Flash over http or pop (file-pdf.rules)
 * 1:1573 <-> DISABLED <-> WEB-CGI cgiforum.pl attempt (web-cgi.rules)
 * 1:15852 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office Web Components Datasource ActiveX clsid access (web-activex.rules)
 * 1:15855 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office Spreadsheet 10.0 ActiveX function call access (web-activex.rules)
 * 1:15858 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office Web Components Spreadsheet ActiveX clsid access (web-activex.rules)
 * 1:15866 <-> DISABLED <-> WEB-CLIENT libxml2 file processing long entity overflow attempt (web-client.rules)
 * 1:15875 <-> DISABLED <-> SQL generic sql insert injection atttempt - POST parameter (sql.rules)
 * 1:15878 <-> DISABLED <-> WEB-ACTIVEX AcerCtrls.APlunch ActiveX clsid access (web-activex.rules)
 * 1:15901 <-> ENABLED <-> POLICY-MULTIMEDIA Nullsoft Winamp AIFF parsing heap buffer overflow attempt (policy-multimedia.rules)
 * 1:1591 <-> DISABLED <-> WEB-CGI faqmanager.cgi access (web-cgi.rules)
 * 1:1592 <-> DISABLED <-> WEB-CGI /fcgi-bin/echo.exe access (web-cgi.rules)
 * 1:15924 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer DHTML Editing ActiveX function call access (web-activex.rules)
 * 1:15926 <-> DISABLED <-> WEB-ACTIVEX PPStream PPSMediaList ActiveX clsid access (web-activex.rules)
 * 1:15928 <-> DISABLED <-> WEB-ACTIVEX PPStream PPSMediaList ActiveX function call access (web-activex.rules)
 * 1:1594 <-> DISABLED <-> WEB-CGI FormHandler.cgi access (web-cgi.rules)
 * 1:1595 <-> DISABLED <-> WEB-IIS htimage.exe access (web-iis.rules)
 * 1:1597 <-> DISABLED <-> WEB-CGI guestbook.cgi access (web-cgi.rules)
 * 1:1599 <-> DISABLED <-> WEB-CGI search.cgi access (web-cgi.rules)
 * 1:1600 <-> DISABLED <-> WEB-CGI htsearch arbitrary configuration file attempt (web-cgi.rules)
 * 1:1601 <-> DISABLED <-> WEB-CGI htsearch arbitrary file read attempt (web-cgi.rules)
 * 1:1602 <-> DISABLED <-> WEB-CGI htsearch access (web-cgi.rules)
 * 1:1608 <-> DISABLED <-> WEB-CGI htmlscript attempt (web-cgi.rules)
 * 1:16119 <-> DISABLED <-> SPYWARE-PUT Adware winreanimator runtime detection - daily update (spyware-put.rules)
 * 1:16143 <-> ENABLED <-> FILE-IDENTIFY Microsoft asf file magic detected (file-identify.rules)
 * 1:16159 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office Excel Add-in for SQL Analysis Services 1 ActiveX clsid access (web-activex.rules)
 * 1:16161 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office Excel Add-in for SQL Analysis Services 2 ActiveX clsid access (web-activex.rules)
 * 1:16163 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office Excel Add-in for SQL Analysis Services 3 ActiveX clsid access (web-activex.rules)
 * 1:16165 <-> DISABLED <-> WEB-ACTIVEX Microsoft Office Excel Add-in for SQL Analysis Services 4 ActiveX clsid access (web-activex.rules)
 * 1:16184 <-> ENABLED <-> SPECIFIC-THREATS Microsoft Windows GDI+ TIFF file parsing heap overflow attempt (specific-threats.rules)
 * 1:1626 <-> DISABLED <-> WEB-IIS /StoreCSVS/InstantOrder.asmx request (web-iis.rules)
 * 1:16305 <-> DISABLED <-> WEB-ACTIVEX Symantec Altiris Deployment Solution ActiveX clsid access (web-activex.rules)
 * 1:16307 <-> DISABLED <-> WEB-ACTIVEX Symantec Altiris Deployment Solution ActiveX function call access (web-activex.rules)
 * 1:16356 <-> ENABLED <-> WEB-IIS multiple extension code execution attempt (web-iis.rules)
 * 1:1637 <-> DISABLED <-> WEB-CGI yabb access (web-cgi.rules)
 * 1:16379 <-> DISABLED <-> WEB-ACTIVEX SAP AG SAPgui sapirrfc ActiveX clsid access (web-activex.rules)
 * 1:16432 <-> DISABLED <-> WEB-ACTIVEX Trend Micro Web Deployment ActiveX clsid access (web-activex.rules)
 * 1:1644 <-> DISABLED <-> WEB-CGI test-cgi attempt (web-cgi.rules)
 * 1:1645 <-> DISABLED <-> WEB-CGI testcgi access (web-cgi.rules)
 * 1:1646 <-> DISABLED <-> WEB-CGI test.cgi access (web-cgi.rules)
 * 1:1648 <-> DISABLED <-> WEB-CGI perl.exe command attempt (web-cgi.rules)
 * 1:1649 <-> DISABLED <-> WEB-CGI perl command attempt (web-cgi.rules)
 * 1:16497 <-> ENABLED <-> SPYWARE-PUT Tear Application downloader attempt to contact server (spyware-put.rules)
 * 1:1651 <-> DISABLED <-> WEB-CGI environ.pl access (web-cgi.rules)
 * 1:1652 <-> DISABLED <-> WEB-CGI campas attempt (web-cgi.rules)
 * 1:1654 <-> DISABLED <-> WEB-CGI cart32.exe access (web-cgi.rules)
 * 1:1655 <-> DISABLED <-> WEB-CGI pfdispaly.cgi arbitrary command execution attempt (web-cgi.rules)
 * 1:16551 <-> ENABLED <-> SPYWARE-PUT Malware contact to server attempt (spyware-put.rules)
 * 1:1656 <-> DISABLED <-> WEB-CGI pfdispaly.cgi access (web-cgi.rules)
 * 1:16565 <-> DISABLED <-> WEB-ACTIVEX Ultra Shareware Office ActiveX clsid access (web-activex.rules)
 * 1:16566 <-> DISABLED <-> WEB-ACTIVEX Tumbleweed SecureTransport ActiveX clsid access (web-activex.rules)
 * 1:16568 <-> DISABLED <-> WEB-ACTIVEX Altnet Download Manager ADM4 ActiveX clsid access (web-activex.rules)
 * 1:16569 <-> DISABLED <-> WEB-ACTIVEX EnjoySAP kweditcontrol ActiveX clsid access (web-activex.rules)
 * 1:16571 <-> DISABLED <-> WEB-ACTIVEX EnjoySAP kweditcontrol ActiveX function call access (web-activex.rules)
 * 1:1658 <-> DISABLED <-> WEB-CGI pagelog.cgi access (web-cgi.rules)
 * 1:1659 <-> DISABLED <-> WEB-COLDFUSION sendmail.cfm access (web-coldfusion.rules)
 * 1:1660 <-> DISABLED <-> WEB-IIS trace.axd access (web-iis.rules)
 * 1:1661 <-> ENABLED <-> WEB-IIS cmd32.exe access (web-iis.rules)
 * 1:16660 <-> DISABLED <-> DOS Microsoft Office SharePoint Server 2007 help.aspx denial of service attempt (dos.rules)
 * 1:16684 <-> DISABLED <-> DOS Samba smbd Session Setup AndX security blob length dos attempt (dos.rules)
 * 1:16711 <-> DISABLED <-> WEB-ACTIVEX E-Book Systems FlipViewer FlipViewerX.dll activex clsid access ActiveX clsid access (web-activex.rules)
 * 1:16716 <-> DISABLED <-> WEB-CLIENT Oracle Java Web Start Splashscreen PNG processing buffer overflow attempt (web-client.rules)
 * 1:16719 <-> ENABLED <-> WEB-CLIENT CA multiple product AV engine CAB header parsing stack overflow attempt (web-client.rules)
 * 1:16720 <-> ENABLED <-> WEB-CLIENT VideoLAN VLC Media Player TY processing buffer overflow attempt (web-client.rules)
 * 1:16721 <-> ENABLED <-> WEB-CLIENT Orbital Viewer .orb stack buffer overflow attempt (web-client.rules)
 * 1:16726 <-> DISABLED <-> WEB-CLIENT gAlan malformed file stack overflow attempt (web-client.rules)
 * 1:16727 <-> ENABLED <-> WEB-CLIENT IDEAL Administration IPJ file handling stack overflow attempt (web-client.rules)
 * 1:16730 <-> ENABLED <-> WEB-CLIENT ProShow Gold PSH file handling overflow attempt (web-client.rules)
 * 1:16733 <-> ENABLED <-> WEB-CLIENT UltraISO CCD file handling overflow attempt (web-client.rules)
 * 1:16734 <-> DISABLED <-> WEB-CLIENT UltraISO CUE file handling stack buffer overflow attempt (web-client.rules)
 * 1:16736 <-> ENABLED <-> WEB-CLIENT VariCAD multiple products DWB file handling overflow attempt (web-client.rules)
 * 1:16746 <-> ENABLED <-> WEB-ACTIVEX IBM Access Support ActiveX clsid access (web-activex.rules)
 * 1:16748 <-> DISABLED <-> WEB-ACTIVEX IBM Access Support ActiveX function call access (web-activex.rules)
 * 1:16779 <-> DISABLED <-> WEB-ACTIVEX EasyMail IMAP4 ActiveX clsid access (web-activex.rules)
 * 1:16781 <-> DISABLED <-> WEB-ACTIVEX EasyMail IMAP4 ActiveX function call access (web-activex.rules)
 * 1:16783 <-> DISABLED <-> WEB-ACTIVEX Autodesk iDrop ActiveX clsid access (web-activex.rules)
 * 1:16784 <-> DISABLED <-> WEB-ACTIVEX Autodesk iDrop ActiveX function call access (web-activex.rules)
 * 1:1700 <-> DISABLED <-> WEB-CGI imagemap.exe access (web-cgi.rules)
 * 1:1701 <-> DISABLED <-> WEB-CGI calendar-admin.pl access (web-cgi.rules)
 * 1:1702 <-> DISABLED <-> WEB-CGI Amaya templates sendtemp.pl access (web-cgi.rules)
 * 1:17087 <-> DISABLED <-> WEB-ACTIVEX VeryDOC PDF Viewer ActiveX clsid access (web-activex.rules)
 * 1:1709 <-> DISABLED <-> WEB-CGI ad.cgi access (web-cgi.rules)
 * 1:17096 <-> DISABLED <-> WEB-ACTIVEX AOL WinAmpX ActiveX clsid access (web-activex.rules)
 * 1:1710 <-> DISABLED <-> WEB-CGI bbs_forum.cgi access (web-cgi.rules)
 * 1:17106 <-> DISABLED <-> FILE-IDENTIFY download of RMF file - potentially malicious (file-identify.rules)
 * 1:1711 <-> DISABLED <-> WEB-CGI bsguest.cgi access (web-cgi.rules)
 * 1:1712 <-> DISABLED <-> WEB-CGI bslist.cgi access (web-cgi.rules)
 * 1:1713 <-> DISABLED <-> WEB-CGI cgforum.cgi access (web-cgi.rules)
 * 1:1714 <-> DISABLED <-> WEB-CGI newdesk access (web-cgi.rules)
 * 1:17148 <-> ENABLED <-> WEB-CLIENT VideoLAN VLC renamed zip file handling code execution attempt - 1 (web-client.rules)
 * 1:17149 <-> ENABLED <-> WEB-CLIENT VideoLAN VLC renamed zip file handling code execution attempt - 2 (web-client.rules)
 * 1:1715 <-> DISABLED <-> WEB-CGI register.cgi access (web-cgi.rules)
 * 1:17150 <-> ENABLED <-> WEB-CLIENT VideoLAN VLC renamed zip file handling code execution attempt - 3 (web-client.rules)
 * 1:1716 <-> DISABLED <-> WEB-CGI gbook.cgi access (web-cgi.rules)
 * 1:17167 <-> DISABLED <-> WEB-ACTIVEX Oracle Siebel Option Pack 1 ActiveX clsid access (web-activex.rules)
 * 1:17169 <-> DISABLED <-> WEB-ACTIVEX Oracle Siebel Option Pack 2 ActiveX clsid access (web-activex.rules)
 * 1:1717 <-> DISABLED <-> WEB-CGI simplestguest.cgi access (web-cgi.rules)
 * 1:17171 <-> DISABLED <-> WEB-ACTIVEX Oracle Siebel Option Pack 3 ActiveX clsid access (web-activex.rules)
 * 1:17173 <-> DISABLED <-> WEB-ACTIVEX Oracle Siebel Option Pack 4 ActiveX clsid access (web-activex.rules)
 * 1:17175 <-> DISABLED <-> WEB-ACTIVEX Oracle Siebel Option Pack 5 ActiveX clsid access (web-activex.rules)
 * 1:17177 <-> DISABLED <-> WEB-ACTIVEX Oracle Siebel Option Pack 6 ActiveX clsid access (web-activex.rules)
 * 1:1718 <-> DISABLED <-> WEB-CGI statsconfig.pl access (web-cgi.rules)
 * 1:1720 <-> DISABLED <-> WEB-CGI talkback.cgi access (web-cgi.rules)
 * 1:1721 <-> DISABLED <-> WEB-CGI adcycle access (web-cgi.rules)
 * 1:1722 <-> DISABLED <-> WEB-CGI MachineInfo access (web-cgi.rules)
 * 1:17229 <-> ENABLED <-> FILE-IDENTIFY Tiff little endian file magic detected (file-identify.rules)
 * 1:17230 <-> ENABLED <-> FILE-IDENTIFY Tiff big endian file magic detected (file-identify.rules)
 * 1:1724 <-> DISABLED <-> WEB-CGI emumail.cgi access (web-cgi.rules)
 * 1:17244 <-> DISABLED <-> SPECIFIC-THREATS Antivirus ACE file handling buffer overflow attempt (specific-threats.rules)
 * 1:1725 <-> DISABLED <-> WEB-IIS +.htr code fragment attempt (web-iis.rules)
 * 1:17252 <-> DISABLED <-> NETBIOS Microsoft Windows Print Spooler arbitrary file write attempt (netbios.rules)
 * 1:1727 <-> DISABLED <-> WEB-CGI SGI InfoSearch fname access (web-cgi.rules)
 * 1:17282 <-> DISABLED <-> MISC Panda Antivirus ZOO archive decompression buffer overflow attempt (misc.rules)
 * 1:17283 <-> DISABLED <-> SERVER-MAIL Mercury Mail Transport System buffer overflow attempt (server-mail.rules)
 * 1:1729 <-> DISABLED <-> POLICY-SOCIAL IRC channel join (policy-social.rules)
 * 1:17314 <-> ENABLED <-> FILE-IDENTIFY OLE Document file magic detected (file-identify.rules)
 * 1:17351 <-> DISABLED <-> WEB-CLIENT Nullsoft Winamp ID3v2 Tag Handling Buffer Overflow attempt (web-client.rules)
 * 1:17356 <-> DISABLED <-> EXPLOIT NOD32 Anti-Virus ARJ Archive Handling Buffer Overflow attempt (exploit.rules)
 * 1:17409 <-> DISABLED <-> WEB-CLIENT Mozilla Products IDN Spoofing Vulnerability Attempt (web-client.rules)
 * 1:1741 <-> DISABLED <-> WEB-PHP DNSTools access (web-php.rules)
 * 1:1742 <-> DISABLED <-> WEB-PHP Blahz-DNS dostuff.php modify user attempt (web-php.rules)
 * 1:1743 <-> DISABLED <-> WEB-PHP Blahz-DNS dostuff.php access (web-php.rules)
 * 1:17430 <-> ENABLED <-> FILE-PDF BitDefender Antivirus PDF processing memory corruption attempt (file-pdf.rules)
 * 1:17435 <-> DISABLED <-> NETBIOS DCERPC NCACN-IP-TCP umpnpmgr PNP_GetDeviceList attempt (netbios.rules)
 * 1:17436 <-> ENABLED <-> NETBIOS DCERPC NCACN-IP-TCP umpnpmgr PNP_GetDeviceListSize attempt (netbios.rules)
 * 1:17437 <-> DISABLED <-> NETBIOS DCERPC NCACN-IP-TCP umpnpmgr PNP_GetDeviceList attempt (netbios.rules)
 * 1:17438 <-> ENABLED <-> NETBIOS DCERPC NCACN-IP-TCP umpnpmgr PNP_GetDeviceListSize attempt (netbios.rules)
 * 1:1745 <-> DISABLED <-> WEB-PHP Messagerie supp_membre.php access (web-php.rules)
 * 1:17457 <-> DISABLED <-> WEB-CLIENT Adobe Flash ActionDefineFunction memory access vulnerability exploit attempt (web-client.rules)
 * 1:17459 <-> ENABLED <-> WEB-CLIENT BitDefender Internet Security script code execution attempt (web-client.rules)
 * 1:17460 <-> ENABLED <-> WEB-CLIENT BitDefender Internet Security script code execution attempt (web-client.rules)
 * 1:17464 <-> DISABLED <-> WEB-ACTIVEX AOL Radio AmpX ActiveX clsid access (web-activex.rules)
 * 1:17469 <-> ENABLED <-> SPECIFIC-THREATS Mplayer Real Demuxer stream_read heap overflow attempt (specific-threats.rules)
 * 1:1750 <-> DISABLED <-> WEB-IIS users.xml access (web-iis.rules)
 * 1:1753 <-> DISABLED <-> WEB-IIS as_web.exe access (web-iis.rules)
 * 1:1754 <-> DISABLED <-> WEB-IIS as_web4.exe access (web-iis.rules)
 * 1:17557 <-> DISABLED <-> WEB-ACTIVEX Novell iPrint ActiveX operation parameter overflow (web-activex.rules)
 * 1:17575 <-> DISABLED <-> WEB-ACTIVEX SizerOne 2 ActiveX clsid access (web-activex.rules)
 * 1:17582 <-> DISABLED <-> WEB-ACTIVEX Symantec Norton AntiVirus CcErrDisp ActiveX function call access (web-activex.rules)
 * 1:17588 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Install Engine ActiveX clsid access (web-activex.rules)
 * 1:17592 <-> DISABLED <-> WEB-ACTIVEX Microsoft MyInfo.dll ActiveX clsid access (web-activex.rules)
 * 1:17593 <-> ENABLED <-> WEB-ACTIVEX Microsoft msdxm.ocx ActiveX clsid access (web-activex.rules)
 * 1:17594 <-> ENABLED <-> WEB-ACTIVEX Microsoft creator.dll 1 ActiveX clsid access (web-activex.rules)
 * 1:17595 <-> ENABLED <-> WEB-ACTIVEX Microsoft creator.dll 2 ActiveX clsid access (web-activex.rules)
 * 1:17596 <-> ENABLED <-> WEB-ACTIVEX Microsoft ciodm.dll ActiveX clsid access (web-activex.rules)
 * 1:17651 <-> DISABLED <-> SPECIFIC-THREATS Multiple AV vendor invalid archive checksum bypass attempt (specific-threats.rules)
 * 1:17664 <-> DISABLED <-> FILE-OFFICE Microsoft Office GIF image descriptor memory corruption attempt (file-office.rules)
 * 1:17668 <-> DISABLED <-> FILE-PDF download of a PDF with embedded JavaScript - JS string attempt (file-pdf.rules)
 * 1:17670 <-> DISABLED <-> WEB-ACTIVEX BigAnt Office Manager ActiveX clsid access (web-activex.rules)
 * 1:17672 <-> DISABLED <-> WEB-ACTIVEX BigAnt Office Manager ActiveX function call access (web-activex.rules)
 * 1:17674 <-> DISABLED <-> WEB-ACTIVEX Skype Extras Manager ActiveX clsid access (web-activex.rules)
 * 1:17676 <-> DISABLED <-> WEB-ACTIVEX Skype Extras Manager ActiveX function call access (web-activex.rules)
 * 1:17707 <-> DISABLED <-> NETBIOS DCERPC NCACN-IP-TCP trend-serverprotect trend_req_num buffer overflow attempt (netbios.rules)
 * 1:17714 <-> DISABLED <-> NETBIOS DCERPC NCACN-IP-TCP trend-serverprotect CMON_ActiveUpdate attempt (netbios.rules)
 * 1:17715 <-> DISABLED <-> NETBIOS DCERPC NCACN-IP-TCP trend-serverprotect CMON_ActiveUpdate attempt (netbios.rules)
 * 1:1772 <-> DISABLED <-> WEB-IIS pbserver access (web-iis.rules)
 * 1:1773 <-> DISABLED <-> WEB-PHP php.exe access (web-php.rules)
 * 1:1774 <-> DISABLED <-> WEB-PHP bb_smilies.php access (web-php.rules)
 * 1:17771 <-> ENABLED <-> EXPLOIT Microsoft Internet Explorer cross-domain information disclosure attempt (exploit.rules)
 * 1:17772 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Scriptlet Component ActiveX clsid access (web-activex.rules)
 * 1:1789 <-> DISABLED <-> POLICY-SOCIAL IRC dns request (policy-social.rules)
 * 1:17898 <-> DISABLED <-> BLACKLIST URI request for known malicious URI - /get2.php?c=VTOXUGUI&d= (blacklist.rules)
 * 1:17899 <-> DISABLED <-> BLACKLIST URI request for known malicious URI - /reques0.asp?kind=006&mac= (blacklist.rules)
 * 1:18069 <-> DISABLED <-> FILE-OFFICE Microsoft Office Art drawing invalid shape identifier attempt (file-office.rules)
 * 1:18097 <-> DISABLED <-> WEB-ACTIVEX VMWare Remote Console Plug-In ActiveX clsid access (web-activex.rules)
 * 1:1817 <-> DISABLED <-> WEB-IIS MS Site Server default login attempt (web-iis.rules)
 * 1:1818 <-> DISABLED <-> WEB-IIS MS Site Server admin attempt (web-iis.rules)
 * 1:18189 <-> DISABLED <-> NETBIOS DCERPC NCACN-IP-TCP netdfs NetrDfsEnum attempt (netbios.rules)
 * 1:18190 <-> DISABLED <-> NETBIOS DCERPC NCADG-IP-UDP netdfs NetrDfsEnum attempt (netbios.rules)
 * 1:18191 <-> DISABLED <-> NETBIOS DCERPC NCACN-IP-TCP netdfs NetrDfsEnum attempt (netbios.rules)
 * 1:18192 <-> DISABLED <-> NETBIOS DCERPC NCADG-IP-UDP netdfs NetrDfsEnum attempt (netbios.rules)
 * 1:18216 <-> ENABLED <-> WEB-CLIENT Microsoft Internet Explorer 6 #default#anim attempt (web-client.rules)
 * 1:18241 <-> ENABLED <-> WEB-ACTIVEX Microsoft Windows WMI Administrator Tools Object Viewer ActiveX clsid access (web-activex.rules)
 * 1:18242 <-> ENABLED <-> WEB-ACTIVEX Microsoft Windows WMI Administrator Tools Object Viewer ActiveX function call access (web-activex.rules)
 * 1:18267 <-> ENABLED <-> NETBIOS DCERPC NCACN-IP-TCP rpcss2_RemoteGetClassObject attempt (netbios.rules)
 * 1:18310 <-> ENABLED <-> FILE-OFFICE Microsoft Office RTF parsing remote code execution attempt (file-office.rules)
 * 1:18319 <-> DISABLED <-> SPECIFIC-THREATS NETBIOS DCERPC NCACN-IP-TCP lsarpc LsarLookupSids lsa_io_trans_name heap overflow attempt (specific-threats.rules)
 * 1:18321 <-> DISABLED <-> WEB-ACTIVEX SonicWall Aventail EPInterrogator ActiveX clsid access (web-activex.rules)
 * 1:18322 <-> DISABLED <-> WEB-ACTIVEX SonicWall Aventail EPInterrogator ActiveX function call access (web-activex.rules)
 * 1:18323 <-> DISABLED <-> WEB-ACTIVEX SonicWall Aventail EPInstaller ActiveX clsid access (web-activex.rules)
 * 1:18324 <-> DISABLED <-> WEB-ACTIVEX SonicWall Aventail EPInstaller ActiveX function call access (web-activex.rules)
 * 1:18325 <-> DISABLED <-> WEB-ACTIVEX Image Viewer CP Gold 6 ActiveX clsid access (web-activex.rules)
 * 1:18329 <-> ENABLED <-> WEB-ACTIVEX Microsoft Windows WMI Administrator Tools Object Viewer ActiveX function call access (web-activex.rules)
 * 1:18472 <-> DISABLED <-> NETBIOS DCERPC NCACN-IP-TCP lsarpc LsarLookupSids lsa_io_trans_name heap overflow attempt (netbios.rules)
 * 1:18483 <-> ENABLED <-> WEB-CLIENT Apple iTunes Playlist Overflow Attempt (web-client.rules)
 * 1:18484 <-> ENABLED <-> WEB-CLIENT Apple iTunes Playlist Overflow Attempt (web-client.rules)
 * 1:18486 <-> ENABLED <-> SPECIFIC-THREATS Mozilla Firefox JavaScript handler race condition memory corruption attempt (specific-threats.rules)
 * 1:18490 <-> DISABLED <-> WEB-ACTIVEX Whale Client Components ActiveX clsid access (web-activex.rules)
 * 1:18491 <-> DISABLED <-> WEB-ACTIVEX Whale Client Components ActiveX ProgID access (web-activex.rules)
 * 1:1850 <-> DISABLED <-> WEB-CGI way-board.cgi access (web-cgi.rules)
 * 1:18527 <-> ENABLED <-> FILE-PDF Adobe Acrobat and Acrobat Reader shell metacharacter code execution attempt (file-pdf.rules)
 * 1:18544 <-> ENABLED <-> SPECIFIC-THREATS embedded Shockwave dropper in email attachment (specific-threats.rules)
 * 1:18548 <-> ENABLED <-> FILE-OFFICE Microsoft Office Excel with embedded Flash file attachment (file-office.rules)
 * 1:18578 <-> ENABLED <-> WEB-ACTIVEX RealNetworks RealPlayer RMOC3260.DLL cdda URI overflow attempt (web-activex.rules)
 * 1:18668 <-> ENABLED <-> WEB-ACTIVEX Microsoft Windows Messenger ActiveX clsid access (web-activex.rules)
 * 1:18680 <-> ENABLED <-> FILE-OFFICE Microsoft Office RTF malformed pfragments field (file-office.rules)
 * 1:18683 <-> ENABLED <-> FILE-OFFICE Microsoft Office Excel file with embedded PDF object (file-office.rules)
 * 1:18684 <-> ENABLED <-> FILE-PDF PDF file with embedded PDF object (file-pdf.rules)
 * 1:18685 <-> DISABLED <-> FILE-OTHER RTF file with embedded OLE object (file-other.rules)
 * 1:18702 <-> ENABLED <-> FILE-OFFICE Microsoft Office RTF malformed pfragments field (file-office.rules)
 * 1:18704 <-> ENABLED <-> FILE-OFFICE Microsoft Office RTF malformed second pfragments field (file-office.rules)
 * 1:18706 <-> ENABLED <-> FILE-OFFICE Microsoft Office RTF malformed second pfragments field (file-office.rules)
 * 1:18741 <-> DISABLED <-> WEB-ACTIVEX CrystalReports EnterpriseControls ActiveX clsid access (web-activex.rules)
 * 1:18776 <-> DISABLED <-> WEB-CLIENT Adobe Shockwave Director pamm chunk memory corruption attempt (web-client.rules)
 * 1:18793 <-> ENABLED <-> WEB-MISC Novell ZENworks Configuration Management UploadServlet code execution attempt (web-misc.rules)
 * 1:18904 <-> DISABLED <-> WEB-ACTIVEX KingView ActiveX clsid access (web-activex.rules)
 * 1:18974 <-> DISABLED <-> WEB-ACTIVEX SAP Crystal Reports PrintControl.dll ActiveX clsid access (web-activex.rules)
 * 1:18975 <-> DISABLED <-> WEB-ACTIVEX SAP Crystal Reports PrintControl.dll ActiveX function call access (web-activex.rules)
 * 1:18983 <-> ENABLED <-> FILE-IDENTIFY Apple Mach-O executable file magic detected (file-identify.rules)
 * 1:19002 <-> DISABLED <-> SPECIFIC-THREATS RealNetworks RealPlayer FLV parsing two integer overflow vulnerabilities (specific-threats.rules)
 * 1:19072 <-> DISABLED <-> EXPLOIT RealNetworks Helix Server NTLM authentication heap overflow attempt (exploit.rules)
 * 1:19085 <-> DISABLED <-> WEB-ACTIVEX LEADTOOLS Raster Twain LtocxTwainu.dll ActiveX clsid access (web-activex.rules)
 * 1:19102 <-> DISABLED <-> WEB-ACTIVEX Symantec CLIProxy.dll ActiveX clsid access (web-activex.rules)
 * 1:19103 <-> DISABLED <-> WEB-ACTIVEX Symantec CLIProxy.dll ActiveX function call access (web-activex.rules)
 * 1:19108 <-> DISABLED <-> WEB-ACTIVEX SonicWall Aventail EPInstaller ActiveX clsid access (web-activex.rules)
 * 1:19109 <-> DISABLED <-> WEB-ACTIVEX SonicWall Aventail EPInstaller ActiveX function call access (web-activex.rules)
 * 1:19128 <-> ENABLED <-> FILE-IDENTIFY RealNetworks Realplayer REC file magic detected (file-identify.rules)
 * 1:19129 <-> ENABLED <-> FILE-IDENTIFY RealNetworks Realplayer .r1m file magic detected (file-identify.rules)
 * 1:19143 <-> DISABLED <-> WEB-CLIENT Microsoft Windows Media Player JPG header record mismatch memory corruption attempt (web-client.rules)
 * 1:19144 <-> DISABLED <-> SPECIFIC-THREATS Microsoft Windows MPEG Layer-3 audio heap corruption attempt (specific-threats.rules)
 * 1:19151 <-> DISABLED <-> WEB-ACTIVEX Trend Micro HouseCall ActiveX clsid access (web-activex.rules)
 * 1:19152 <-> DISABLED <-> WEB-ACTIVEX Trend Micro HouseCall ActiveX function call access (web-activex.rules)
 * 1:19166 <-> ENABLED <-> FILE-IDENTIFY Microsoft Office Excel file magic detected (file-identify.rules)
 * 1:19193 <-> DISABLED <-> WEB-ACTIVEX Oracle Document Capture ActiveX clsid access (web-activex.rules)
 * 1:19194 <-> DISABLED <-> WEB-ACTIVEX Oracle Document Capture ActiveX function call access (web-activex.rules)
 * 1:19197 <-> DISABLED <-> WEB-ACTIVEX CA Internet Security Suite XMLSecDB ActiveX clsid access (web-activex.rules)
 * 1:19198 <-> DISABLED <-> WEB-ACTIVEX CA Internet Security Suite XMLSecDB ActiveX function call access (web-activex.rules)
 * 1:19214 <-> DISABLED <-> WEB-ACTIVEX HP Photo Creative ActiveX clsid access (web-activex.rules)
 * 1:19226 <-> DISABLED <-> SPECIFIC-THREATS Cisco Webex Player .wrf stack buffer overflow (specific-threats.rules)
 * 1:19268 <-> DISABLED <-> FILE-PDF attempted download of a PDF with embedded Flash over smb (file-pdf.rules)
 * 1:19269 <-> DISABLED <-> FILE-PDF attempted download of a PDF with embedded Flash over smtp (file-pdf.rules)
 * 1:19291 <-> ENABLED <-> NETBIOS Microsoft LNK shortcut download attempt (netbios.rules)
 * 1:19304 <-> DISABLED <-> WEB-ACTIVEX Oracle EasyMail ActiveX clsid access (web-activex.rules)
 * 1:19305 <-> DISABLED <-> WEB-ACTIVEX Oracle EasyMail ActiveX function call access (web-activex.rules)
 * 1:19395 <-> DISABLED <-> BOTNET-CNC Trojan Downloader Win32.Monkif.J inbound connection - dest ip infected (botnet-cnc.rules)
 * 1:19431 <-> DISABLED <-> WEB-CLIENT Nullsoft Winamp MIDI Timestamp buffer overflow attempt (web-client.rules)
 * 1:19432 <-> DISABLED <-> WEB-CLIENT Nullsoft Winamp MIDI Timestamp buffer overflow attempt (web-client.rules)
 * 1:19439 <-> DISABLED <-> SQL 1 = 1 - possible sql injection attempt (sql.rules)
 * 1:19440 <-> DISABLED <-> SQL 1 = 0 - possible sql injection attempt (sql.rules)
 * 1:19561 <-> DISABLED <-> WEB-ACTIVEX RealNetworks RealPlayer ieframe.dll ActiveX clsid access (web-activex.rules)
 * 1:19562 <-> DISABLED <-> WEB-ACTIVEX RealNetworks RealGames InstallerDlg.dll ActiveX clsid access (web-activex.rules)
 * 1:19563 <-> DISABLED <-> WEB-ACTIVEX RealNetworks RealGames InstallerDlg.dll ActiveX function call access (web-activex.rules)
 * 1:19564 <-> DISABLED <-> WEB-ACTIVEX RealNetworks RealGames InstallerDlg.dll ActiveX clsid access (web-activex.rules)
 * 1:19565 <-> DISABLED <-> WEB-ACTIVEX RealNetworks RealGames InstallerDlg.dll ActiveX function call access (web-activex.rules)
 * 1:19610 <-> DISABLED <-> WEB-ACTIVEX ShockwaveFlash.ShockwaveFlash ActiveX function call access (web-activex.rules)
 * 1:19650 <-> DISABLED <-> WEB-ACTIVEX Cisco AnyConnect ActiveX clsid access (web-activex.rules)
 * 1:19651 <-> DISABLED <-> WEB-ACTIVEX Cisco AnyConnect ActiveX function call access (web-activex.rules)
 * 1:19807 <-> DISABLED <-> WEB-CLIENT Apple Safari Webkit SVG memory corruption attempt (web-client.rules)
 * 1:1981 <-> DISABLED <-> BACKDOOR DeepThroat 3.1 Connection attempt on port 3150 (backdoor.rules)
 * 1:1982 <-> DISABLED <-> BACKDOOR DeepThroat 3.1 Server Response on port 3150 (backdoor.rules)
 * 1:1983 <-> DISABLED <-> BACKDOOR DeepThroat 3.1 Connection attempt on port 4120 (backdoor.rules)
 * 1:1984 <-> DISABLED <-> BACKDOOR DeepThroat 3.1 Server Response on port 4120 (backdoor.rules)
 * 1:19907 <-> ENABLED <-> FILE-IDENTIFY PICT file magic detected (file-identify.rules)
 * 1:19925 <-> DISABLED <-> WEB-ACTIVEX Novell iPrint ActiveX client browser plugin call-back-url buffer overflow attempt (web-activex.rules)
 * 1:19950 <-> DISABLED <-> BACKDOOR DarkstRat 2008 inbound connection (backdoor.rules)
 * 1:20044 <-> DISABLED <-> WEB-ACTIVEX F-Secure Anti-Virus fsresh.dll clsid access (web-activex.rules)
 * 1:20047 <-> DISABLED <-> SQL 1 = 1 - possible sql injection attempt (sql.rules)
 * 1:20050 <-> DISABLED <-> SPECIFIC-THREATS Adobe Flash Player memory consumption vulnerability (specific-threats.rules)
 * 1:20052 <-> DISABLED <-> SCADA IntelliCom NetBiter config utility hostname overflow attempt (scada.rules)
 * 1:20059 <-> DISABLED <-> SPECIFIC-THREATS Apple Quicktime PictureViewer GIF rendering vulnerability (specific-threats.rules)
 * 1:20062 <-> DISABLED <-> FILE-OFFICE Microsoft Office Excel File Importing Code Execution (file-office.rules)
 * 1:20071 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Visual Studio WMIScriptUtils.WMIObjectBroker2.1 ActiveX CLSID access (web-activex.rules)
 * 1:20085 <-> DISABLED <-> BACKDOOR Win32.Veebuu.BX outbound connection (backdoor.rules)
 * 1:20089 <-> DISABLED <-> INDICATOR-COMPROMISE IRC nick change on non-standard port (indicator-compromise.rules)
 * 1:20092 <-> DISABLED <-> INDICATOR-COMPROMISE IRC channel join on non-standard port (indicator-compromise.rules)
 * 1:20093 <-> DISABLED <-> INDICATOR-COMPROMISE IRC channel notice on non-standard port (indicator-compromise.rules)
 * 1:20094 <-> DISABLED <-> INDICATOR-COMPROMISE IRC message on non-standard port (indicator-compromise.rules)
 * 1:20095 <-> DISABLED <-> INDICATOR-COMPROMISE IRC dns request on non-standard port (indicator-compromise.rules)
 * 1:20101 <-> DISABLED <-> SPYWARE-PUT Adware Arcade Web - User-Agent (spyware-put.rules)
 * 1:20102 <-> DISABLED <-> SPYWARE-PUT Adware Arcade Web - X-Arcadeweb header (spyware-put.rules)
 * 1:20103 <-> DISABLED <-> SPYWARE-PUT Adware playsushi - User-Agent (spyware-put.rules)
 * 1:20134 <-> DISABLED <-> EXPLOIT HP OpenView Storage Data Protector buffer overflow attempt (exploit.rules)
 * 1:20168 <-> DISABLED <-> WEB-ACTIVEX ChemView SaveAsMolFile vulnerability ActiveX clsid access (web-activex.rules)
 * 1:20172 <-> DISABLED <-> FILE-IDENTIFY Metastock mwl file magic detected (file-identify.rules)
 * 1:20175 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Remote Desktop Client ActiveX clsid access (web-activex.rules)
 * 1:20227 <-> DISABLED <-> EXPLOIT VideoLAN VLC webm memory corruption attempt (exploit.rules)
 * 1:20246 <-> ENABLED <-> FILE-OFFICE Microsoft Office Outlook SMB attach by reference code execution attempt (file-office.rules)
 * 1:20247 <-> ENABLED <-> FILE-OFFICE Microsoft Office Outlook SMB attach by reference code execution attempt (file-office.rules)
 * 1:20258 <-> DISABLED <-> EXPLOIT Microsoft Forefront UAG javascript handler in URI XSS attempt (exploit.rules)
 * 1:20285 <-> DISABLED <-> WEB-ACTIVEX Black Ice Barcode SDK ActiveX clsid access (web-activex.rules)
 * 1:20286 <-> DISABLED <-> WEB-ACTIVEX Black Ice Barcode SDK ActiveX function call access (web-activex.rules)
 * 1:20445 <-> DISABLED <-> FILE-PDF Foxit Reader title overflow attempt (file-pdf.rules)
 * 1:20450 <-> ENABLED <-> FILE-IDENTIFY MPEG video stream file magic detected (file-identify.rules)
 * 1:20451 <-> ENABLED <-> FILE-IDENTIFY MPEG sys stream file magic detected (file-identify.rules)
 * 1:20452 <-> ENABLED <-> FILE-IDENTIFY GZip file magic detected (file-identify.rules)
 * 1:20453 <-> ENABLED <-> FILE-IDENTIFY Script encoder file magic detected (file-identify.rules)
 * 1:20454 <-> ENABLED <-> FILE-IDENTIFY Postscript file magic detected (file-identify.rules)
 * 1:20456 <-> ENABLED <-> FILE-IDENTIFY RealNetworks Real Media file magic detected (file-identify.rules)
 * 1:20458 <-> ENABLED <-> FILE-IDENTIFY bzip file magic detected (file-identify.rules)
 * 1:20459 <-> ENABLED <-> FILE-IDENTIFY GIF file magic detected (file-identify.rules)
 * 1:20460 <-> ENABLED <-> FILE-IDENTIFY MP3 file magic detected (file-identify.rules)
 * 1:20461 <-> ENABLED <-> FILE-IDENTIFY Microsoft Windows CAB file magic detected (file-identify.rules)
 * 1:20462 <-> ENABLED <-> FILE-IDENTIFY Ogg Stream file magic detected (file-identify.rules)
 * 1:20464 <-> ENABLED <-> FILE-IDENTIFY ZIP file magic detected (file-identify.rules)
 * 1:20465 <-> ENABLED <-> FILE-IDENTIFY ZIP file magic detected (file-identify.rules)
 * 1:20466 <-> ENABLED <-> FILE-IDENTIFY ZIP file magic detected (file-identify.rules)
 * 1:20467 <-> ENABLED <-> FILE-IDENTIFY ZIP file magic detected (file-identify.rules)
 * 1:20468 <-> ENABLED <-> FILE-IDENTIFY ZIP file magic detected (file-identify.rules)
 * 1:20469 <-> ENABLED <-> FILE-IDENTIFY ZIP file magic detected (file-identify.rules)
 * 1:20471 <-> ENABLED <-> FILE-IDENTIFY RIFX file magic detected (file-identify.rules)
 * 1:20472 <-> ENABLED <-> FILE-IDENTIFY RAR file magic detected (file-identify.rules)
 * 1:20474 <-> ENABLED <-> FILE-IDENTIFY Symantec file magic detected (file-identify.rules)
 * 1:20475 <-> ENABLED <-> FILE-IDENTIFY ARJ file magic detected (file-identify.rules)
 * 1:20476 <-> ENABLED <-> FILE-IDENTIFY TNEF file magic detected (file-identify.rules)
 * 1:20477 <-> ENABLED <-> FILE-IDENTIFY ELF file magic detected (file-identify.rules)
 * 1:20478 <-> ENABLED <-> FILE-IDENTIFY PNG file magic detected (file-identify.rules)
 * 1:20479 <-> ENABLED <-> FILE-IDENTIFY CryptFF file magic detected (file-identify.rules)
 * 1:20481 <-> ENABLED <-> FILE-IDENTIFY MP3 file magic detected (file-identify.rules)
 * 1:20483 <-> ENABLED <-> FILE-IDENTIFY JPEG file magic detected (file-identify.rules)
 * 1:20484 <-> ENABLED <-> FILE-IDENTIFY SIS file magic detected (file-identify.rules)
 * 1:20485 <-> ENABLED <-> FILE-IDENTIFY SIP log file magic detected (file-identify.rules)
 * 1:20487 <-> ENABLED <-> FILE-IDENTIFY 7zip file magic detected (file-identify.rules)
 * 1:20488 <-> ENABLED <-> FILE-IDENTIFY MachO Little Endian file magic detected (file-identify.rules)
 * 1:20489 <-> ENABLED <-> FILE-IDENTIFY MachO x64 Little Endian file magic detected (file-identify.rules)
 * 1:20490 <-> ENABLED <-> FILE-IDENTIFY MachO Big Endian file magic detected (file-identify.rules)
 * 1:20491 <-> ENABLED <-> FILE-IDENTIFY MachO x64 Big Endian file magic detected (file-identify.rules)
 * 1:20492 <-> ENABLED <-> FILE-IDENTIFY Universal Binary/Java Bytecode file magic detected (file-identify.rules)
 * 1:20493 <-> ENABLED <-> FILE-IDENTIFY jarpack file magic detected (file-identify.rules)
 * 1:20494 <-> ENABLED <-> FILE-IDENTIFY PDF file magic detected (file-identify.rules)
 * 1:20495 <-> ENABLED <-> FILE-IDENTIFY compressed Adobe Shockwave Flash file magic detected (file-identify.rules)
 * 1:20497 <-> ENABLED <-> FILE-IDENTIFY Adobe Shockwave Flash file magic detected (file-identify.rules)
 * 1:20500 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:20501 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:20502 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:20503 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:20504 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:20507 <-> ENABLED <-> FILE-IDENTIFY Adobe Shockwave Flash file magic detected (file-identify.rules)
 * 1:20511 <-> ENABLED <-> FILE-IDENTIFY bcproj file magic detected (file-identify.rules)
 * 1:20512 <-> ENABLED <-> FILE-IDENTIFY mx4 file magic detected (file-identify.rules)
 * 1:20513 <-> ENABLED <-> FILE-IDENTIFY ffmpeg file magic detected (file-identify.rules)
 * 1:20514 <-> ENABLED <-> FILE-IDENTIFY dmg file magic detected (file-identify.rules)
 * 1:20515 <-> ENABLED <-> FILE-IDENTIFY ivr file magic detected (file-identify.rules)
 * 1:20516 <-> ENABLED <-> FILE-IDENTIFY caff file magic detected (file-identify.rules)
 * 1:20520 <-> ENABLED <-> FILE-IDENTIFY vmd file magic detected (file-identify.rules)
 * 1:20521 <-> ENABLED <-> FILE-IDENTIFY Flac file magic detected (file-identify.rules)
 * 1:20529 <-> DISABLED <-> EXPLOIT Oracle Java trusted method chaining attempt (exploit.rules)
 * 1:2053 <-> DISABLED <-> WEB-CGI process_bug.cgi access (web-cgi.rules)
 * 1:20536 <-> DISABLED <-> WEB-ACTIVEX Moxa MediaDBPlayback.DLL ActiveX clsid access (web-activex.rules)
 * 1:20537 <-> DISABLED <-> WEB-ACTIVEX Phobos.Playlist ActiveX clsid access (web-activex.rules)
 * 1:20538 <-> DISABLED <-> WEB-ACTIVEX Phobos.Playlist ActiveX function call access (web-activex.rules)
 * 1:2055 <-> DISABLED <-> WEB-CGI enter_bug.cgi access (web-cgi.rules)
 * 1:20564 <-> ENABLED <-> FILE-IDENTIFY amf file magic detected (file-identify.rules)
 * 1:20572 <-> DISABLED <-> WEB-MISC Microsoft Windows Font Library file buffer overflow attempt (web-misc.rules)
 * 1:20573 <-> DISABLED <-> WEB-ACTIVEX Oracle AutoVueX Control ExportEdaBom ActiveX clsid access (web-activex.rules)
 * 1:20574 <-> DISABLED <-> WEB-ACTIVEX Oracle AutoVueX Control ExportEdaBom ActiveX function call access (web-activex.rules)
 * 1:20581 <-> DISABLED <-> SCADA BroadWin WebAccess Client format string exploit attempt (scada.rules)
 * 1:20582 <-> DISABLED <-> SCADA BroadWin WebAccess Client arbitrary memory corruption attempt (scada.rules)
 * 1:20589 <-> ENABLED <-> FILE-IDENTIFY CDR file magic detected (file-identify.rules)
 * 1:20591 <-> DISABLED <-> WEB-ACTIVEX Flexera InstallShield ISGrid2.dll DoFindReplace heap buffer overlow ActiveX clsid access (web-activex.rules)
 * 1:20592 <-> DISABLED <-> WEB-ACTIVEX Flexera InstallShield ISGrid2.dll DoFindReplace heap buffer overlow ActiveX function call access (web-activex.rules)
 * 1:20638 <-> DISABLED <-> SCADA Progea Movicon/PowerHMI EIDP over HTTP memory corruption attempt (scada.rules)
 * 1:20664 <-> DISABLED <-> WEB-IIS Microsoft Windows IIS UNC mapped virtual host file source code access attempt (web-iis.rules)
 * 1:20665 <-> DISABLED <-> WEB-IIS Microsoft Windows IIS UNC mapped virtual host file source code access attempt (web-iis.rules)
 * 1:20704 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer #default#time behavior attack attempt (web-activex.rules)
 * 1:20705 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Time DATIME.DLL ActiveX clsid access (web-activex.rules)
 * 1:20706 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Time DATIME.DLL ActiveX clsid access (web-activex.rules)
 * 1:20707 <-> DISABLED <-> WEB-ACTIVEX Dell IT Assistant ActiveX clsid access (web-activex.rules)
 * 1:20708 <-> DISABLED <-> WEB-ACTIVEX HP Easy Printer Care Software ActiveX clsid access (web-activex.rules)
 * 1:20709 <-> DISABLED <-> WEB-ACTIVEX HP Photo Creative ActiveX clsid access (web-activex.rules)
 * 1:20710 <-> DISABLED <-> WEB-ACTIVEX HP Photo Creative ActiveX clsid access (web-activex.rules)
 * 1:20711 <-> DISABLED <-> WEB-ACTIVEX HP Photo Creative ActiveX clsid access (web-activex.rules)
 * 1:20712 <-> DISABLED <-> WEB-ACTIVEX HP Photo Creative ActiveX clsid access (web-activex.rules)
 * 1:20713 <-> DISABLED <-> WEB-ACTIVEX HP Photo Creative ActiveX clsid access (web-activex.rules)
 * 1:20714 <-> DISABLED <-> WEB-ACTIVEX HP Photo Creative ActiveX clsid access (web-activex.rules)
 * 1:20715 <-> DISABLED <-> WEB-ACTIVEX HP Photo Creative ActiveX clsid access (web-activex.rules)
 * 1:20716 <-> DISABLED <-> WEB-ACTIVEX Yahoo!  CD Player ActiveX clsid access (web-activex.rules)
 * 1:20721 <-> DISABLED <-> FILE-OFFICE Microsoft Office Publisher PLC object memory corruption attempt (file-office.rules)
 * 1:20729 <-> DISABLED <-> WEB-CLIENT Mozilla XBL object valueOf code execution attempt (web-client.rules)
 * 1:20750 <-> ENABLED <-> FILE-IDENTIFY webm file magic detected (file-identify.rules)
 * 1:20758 <-> DISABLED <-> POLICY-OTHER Progrea Movicon TCPUploadServer.exe unauthenticated access attempt (policy-other.rules)
 * 1:20834 <-> DISABLED <-> WEB-ACTIVEX Novell ZENworks LaunchHelp.dll LaunchProcess Code Execution ActiveX clsid access (web-activex.rules)
 * 1:20835 <-> DISABLED <-> WEB-ACTIVEX Novell ZENworks LaunchHelp.dll LaunchProcess Code Execution ActiveX function call access (web-activex.rules)
 * 1:20836 <-> DISABLED <-> BOTNET-CNC Win32.Zusy.A runtime traffic detected (botnet-cnc.rules)
 * 1:20846 <-> DISABLED <-> WEB-ACTIVEX Oracle Hyperion strategic finance client SetDevNames heap buffer overflow ActiveX clsid access (web-activex.rules)
 * 1:20847 <-> DISABLED <-> WEB-ACTIVEX Oracle Hyperion strategic finance client SetDevNames heap buffer overflow ActiveX function call access (web-activex.rules)
 * 1:2085 <-> DISABLED <-> WEB-CGI parse_xml.cgi access (web-cgi.rules)
 * 1:20852 <-> ENABLED <-> FILE-IDENTIFY DAZ Studio script download request (file-identify.rules)
 * 1:20859 <-> ENABLED <-> FILE-IDENTIFY Autodesk Maya embedded language script download request (file-identify.rules)
 * 1:20860 <-> ENABLED <-> FILE-IDENTIFY Autodesk Maya file magic detected (file-identify.rules)
 * 1:20869 <-> ENABLED <-> FILE-IDENTIFY Autodesk 3D Studio Maxscript download request (file-identify.rules)
 * 1:20875 <-> DISABLED <-> WEB-ACTIVEX ShockwaveFlash.ShockwaveFlash ActiveX clsid access (web-activex.rules)
 * 1:20888 <-> ENABLED <-> FILE-IDENTIFY Video Spirit visprj download attempt (file-identify.rules)
 * 1:20924 <-> ENABLED <-> FILE-IDENTIFY PLS file magic detected (file-identify.rules)
 * 1:20928 <-> ENABLED <-> FILE-IDENTIFY SMIL file magic detected (file-identify.rules)
 * 1:20949 <-> DISABLED <-> WEB-ACTIVEX Autodesk iDrop ActiveX clsid access (web-activex.rules)
 * 1:20950 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:20951 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:20952 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:20953 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:20954 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:20955 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:20956 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:20957 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:20958 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:20959 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:21022 <-> DISABLED <-> WEB-ACTIVEX Viscom Software Image Viewer ActiveX clsid access (web-activex.rules)
 * 1:21023 <-> DISABLED <-> WEB-ACTIVEX Viscom Software Image Viewer ActiveX function call access (web-activex.rules)
 * 1:21024 <-> DISABLED <-> WEB-ACTIVEX McAfee Security as a Service ActiveX clsid access (web-activex.rules)
 * 1:21025 <-> DISABLED <-> WEB-ACTIVEX McAfee Security as a Service ActiveX function call (web-activex.rules)
 * 1:21026 <-> DISABLED <-> WEB-ACTIVEX McAfee Security as a Service ActiveX clsid access (web-activex.rules)
 * 1:21027 <-> DISABLED <-> WEB-ACTIVEX McAfee Security as a Service ActiveX function call (web-activex.rules)
 * 1:21029 <-> DISABLED <-> WEB-ACTIVEX Bennet-Tec TList saveData arbitrary file creation ActiveX clsid access (web-activex.rules)
 * 1:21030 <-> DISABLED <-> WEB-ACTIVEX Bennet-Tec TList saveData arbitrary file creation ActiveX function call access (web-activex.rules)
 * 1:21031 <-> DISABLED <-> WEB-ACTIVEX Bennet-Tec TList saveData arbitrary file creation ActiveX clsid access (web-activex.rules)
 * 1:21032 <-> DISABLED <-> WEB-ACTIVEX Bennet-Tec TList saveData arbitrary file creation ActiveX function call access (web-activex.rules)
 * 1:21033 <-> DISABLED <-> WEB-ACTIVEX Bennet-Tec TList saveData arbitrary file creation ActiveX clsid access (web-activex.rules)
 * 1:21034 <-> DISABLED <-> WEB-ACTIVEX Bennet-Tec TList saveData arbitrary file creation ActiveX function call access (web-activex.rules)
 * 1:21063 <-> DISABLED <-> WEB-ACTIVEX HP Easy Printer Care Software ActiveX clsid access (web-activex.rules)
 * 1:21064 <-> DISABLED <-> WEB-ACTIVEX HP Easy Printer Care Software ActiveX function call access (web-activex.rules)
 * 1:21076 <-> DISABLED <-> WEB-ACTIVEX HP Easy Printer Care Software ActiveX clsid access (web-activex.rules)
 * 1:21077 <-> DISABLED <-> WEB-ACTIVEX HP Easy Printer Care Software ActiveX function call (web-activex.rules)
 * 1:21081 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer RDS.Dataspace ActiveX object code execution attempt (web-activex.rules)
 * 1:21093 <-> DISABLED <-> EXPLOIT A-PDF Wav to mp3 converter buffer overfow (exploit.rules)
 * 1:21094 <-> DISABLED <-> WEB-ACTIVEX McAfee Remediation Agent ActiveX function call access (web-activex.rules)
 * 1:21112 <-> DISABLED <-> EXPLOIT RealNetworks RealPlayer mpeg width integer memory underflow attempt (exploit.rules)
 * 1:2116 <-> DISABLED <-> WEB-CGI chipcfg.cgi access (web-cgi.rules)
 * 1:2117 <-> DISABLED <-> WEB-IIS Battleaxe Forum login.asp access (web-iis.rules)
 * 1:21186 <-> DISABLED <-> ORACLE MDSYS drop table trigger injection attempt (oracle.rules)
 * 1:21254 <-> ENABLED <-> FILE-PDF Foxit Reader createDataObject file write attempt (file-pdf.rules)
 * 1:21264 <-> DISABLED <-> WEB-ACTIVEX Symantec Norton Internet Security 2004 ActiveX function call (web-activex.rules)
 * 1:2127 <-> DISABLED <-> WEB-CGI ikonboard.cgi access (web-cgi.rules)
 * 1:21270 <-> DISABLED <-> WEB-MISC Devellion CubeCart multiple parameter XSS vulnerability (web-misc.rules)
 * 1:2128 <-> DISABLED <-> WEB-CGI swsrv.cgi access (web-cgi.rules)
 * 1:2129 <-> DISABLED <-> WEB-IIS nsiislog.dll access (web-iis.rules)
 * 1:2130 <-> DISABLED <-> WEB-IIS IISProtect siteadmin.asp access (web-iis.rules)
 * 1:2131 <-> DISABLED <-> WEB-IIS IISProtect access (web-iis.rules)
 * 1:2132 <-> DISABLED <-> WEB-IIS Synchrologic Email Accelerator userid list access attempt (web-iis.rules)
 * 1:2133 <-> DISABLED <-> WEB-IIS MS BizTalk server access (web-iis.rules)
 * 1:21339 <-> ENABLED <-> EXPLOIT Adobe Flash Player MP4 zero length atom 'auth' field attempt (exploit.rules)
 * 1:2134 <-> DISABLED <-> WEB-IIS register.asp access (web-iis.rules)
 * 1:21340 <-> ENABLED <-> EXPLOIT Adobe Flash Player MP4 zero length atom 'titl' field attempt (exploit.rules)
 * 1:21341 <-> ENABLED <-> EXPLOIT Adobe Flash Player MP4 zero length atom 'dscp' field attempt (exploit.rules)
 * 1:21342 <-> ENABLED <-> EXPLOIT Adobe Flash Player MP4 zero length atom 'cprt' field attempt (exploit.rules)
 * 1:21397 <-> DISABLED <-> SPECIFIC-THREATS MicroP mppl stack buffer overflow (specific-threats.rules)
 * 1:21403 <-> DISABLED <-> BACKDOOR Worm.Win32.Vobfus.DL runtime detection (backdoor.rules)
 * 1:21406 <-> DISABLED <-> WEB-ACTIVEX McAfee Security Center ActiveX clsid access (web-activex.rules)
 * 1:21413 <-> DISABLED <-> WEB-CLIENT PeaZip command injection attempt (web-client.rules)
 * 1:2144 <-> DISABLED <-> WEB-PHP b2 cafelog gm-2-b2.php access (web-php.rules)
 * 1:2149 <-> DISABLED <-> WEB-PHP Turba status.php access (web-php.rules)
 * 1:21493 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows DRM technology msnetobj.dll ActiveX clsid access (web-activex.rules)
 * 1:21496 <-> DISABLED <-> BOTNET-CNC Trojan.Saeeka initial connection detection (botnet-cnc.rules)
 * 1:21497 <-> DISABLED <-> BOTNET-CNC Trojan.Saeeka runtime detection (botnet-cnc.rules)
 * 1:2152 <-> DISABLED <-> WEB-PHP test.php access (web-php.rules)
 * 1:21557 <-> DISABLED <-> WEB-CLIENT Apple OSX ZIP archive shell script execution attempt (web-client.rules)
 * 1:21560 <-> DISABLED <-> WEB-ACTIVEX Symantec Norton Antivirus ActiveX clsid access (web-activex.rules)
 * 1:21561 <-> DISABLED <-> WEB-ACTIVEX Symantec Norton Antivirus ActiveX function call access (web-activex.rules)
 * 1:21569 <-> DISABLED <-> WEB-CLIENT Microsoft Internet Explorer toStaticHTML XSS attempt (web-client.rules)
 * 1:2157 <-> DISABLED <-> WEB-IIS IISProtect globaladmin.asp access (web-iis.rules)
 * 1:21587 <-> DISABLED <-> WEB-CLIENT VisiWave VWR file parsing code execution attempt (web-client.rules)
 * 1:21589 <-> DISABLED <-> WEB-ACTIVEX IBM eGatherer ActiveX clsid access (web-activex.rules)
 * 1:21590 <-> DISABLED <-> WEB-ACTIVEX IBM eGatherer ActiveX function call access (web-activex.rules)
 * 1:21620 <-> ENABLED <-> FILE-IDENTIFY WAV file magic detected (file-identify.rules)
 * 1:21621 <-> ENABLED <-> FILE-IDENTIFY AVI file magic detected (file-identify.rules)
 * 1:21668 <-> DISABLED <-> SPECIFIC-THREATS Java exploit kit iframe drive by attempt (specific-threats.rules)
 * 1:21669 <-> DISABLED <-> VOIP-SIP-UDP Asterisk expires header denial of service attempt (voip.rules)
 * 1:21769 <-> DISABLED <-> BACKDOOR Win32.LogonInvader.a runtime detection (backdoor.rules)
 * 1:21882 <-> DISABLED <-> WEB-ACTIVEX ICONICS WebHMI ActiveX clsid access attempt (web-activex.rules)
 * 1:21883 <-> DISABLED <-> WEB-ACTIVEX ICONICS WebHMI ActiveX clsid access attempt (web-activex.rules)
 * 1:21918 <-> DISABLED <-> WEB-ACTIVEX IBM Tivoli Provisioning Manager Express Buffer Overflow ActiveX clsid access attempt (web-activex.rules)
 * 1:21919 <-> DISABLED <-> WEB-ACTIVEX IBM Tivoli Provisioning Manager Express Buffer Overflow ActiveX function call access attempt (web-activex.rules)
 * 1:21928 <-> DISABLED <-> FILE-OFFICE Microsoft Office Excel malformed FBI record (file-office.rules)
 * 1:2194 <-> DISABLED <-> WEB-CGI CSMailto.cgi access (web-cgi.rules)
 * 1:2195 <-> DISABLED <-> WEB-CGI alert.cgi access (web-cgi.rules)
 * 1:21950 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows MSWebDVD ActiveX clsid access attempt (web-activex.rules)
 * 1:21951 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows MSWebDVD ActiveX function call attempt (web-activex.rules)
 * 1:2196 <-> DISABLED <-> WEB-CGI catgy.cgi access (web-cgi.rules)
 * 1:2197 <-> DISABLED <-> WEB-CGI cvsview2.cgi access (web-cgi.rules)
 * 1:2198 <-> DISABLED <-> WEB-CGI cvslog.cgi access (web-cgi.rules)
 * 1:2199 <-> DISABLED <-> WEB-CGI multidiff.cgi access (web-cgi.rules)
 * 1:21995 <-> ENABLED <-> BOTNET-CNC Win32.Dorkbot.I Runtime Detection Generic (botnet-cnc.rules)
 * 1:21999 <-> ENABLED <-> FILE-IDENTIFY OpenType Font file magic detection (file-identify.rules)
 * 1:2200 <-> DISABLED <-> WEB-CGI dnewsweb.cgi access (web-cgi.rules)
 * 1:22003 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer WMIScriptUtils.WMIObjectBroker2.1 ActiveX CLSIDaccess (web-activex.rules)
 * 1:2201 <-> DISABLED <-> WEB-CGI download.cgi access (web-cgi.rules)
 * 1:2202 <-> DISABLED <-> WEB-CGI edit_action.cgi access (web-cgi.rules)
 * 1:2203 <-> DISABLED <-> WEB-CGI everythingform.cgi access (web-cgi.rules)
 * 1:2204 <-> DISABLED <-> WEB-CGI ezadmin.cgi access (web-cgi.rules)
 * 1:22049 <-> DISABLED <-> WEB-ACTIVEX Symantec Norton Internet Security ActiveX clsid access (web-activex.rules)
 * 1:2205 <-> DISABLED <-> WEB-CGI ezboard.cgi access (web-cgi.rules)
 * 1:22050 <-> DISABLED <-> WEB-ACTIVEX Symantec Norton Internet Security ActiveX function call (web-activex.rules)
 * 1:2206 <-> DISABLED <-> WEB-CGI ezman.cgi access (web-cgi.rules)
 * 1:2207 <-> DISABLED <-> WEB-CGI fileseek.cgi access (web-cgi.rules)
 * 1:2208 <-> DISABLED <-> WEB-CGI fom.cgi access (web-cgi.rules)
 * 1:2209 <-> DISABLED <-> WEB-CGI getdoc.cgi access (web-cgi.rules)
 * 1:2210 <-> DISABLED <-> WEB-CGI global.cgi access (web-cgi.rules)
 * 1:2211 <-> DISABLED <-> WEB-CGI guestserver.cgi access (web-cgi.rules)
 * 1:22113 <-> DISABLED <-> SERVER-MAIL Metamail header length exploit attempt (server-mail.rules)
 * 1:22114 <-> DISABLED <-> SERVER-MAIL Metamail header length exploit attempt (server-mail.rules)
 * 1:22115 <-> DISABLED <-> SERVER-MAIL Metamail header length exploit attempt (server-mail.rules)
 * 1:2212 <-> DISABLED <-> WEB-CGI imageFolio.cgi access (web-cgi.rules)
 * 1:2213 <-> DISABLED <-> WEB-CGI mailfile.cgi access (web-cgi.rules)
 * 1:2214 <-> DISABLED <-> WEB-CGI mailview.cgi access (web-cgi.rules)
 * 1:2215 <-> DISABLED <-> WEB-CGI nsManager.cgi access (web-cgi.rules)
 * 1:2216 <-> DISABLED <-> WEB-CGI readmail.cgi access (web-cgi.rules)
 * 1:2217 <-> DISABLED <-> WEB-CGI printmail.cgi access (web-cgi.rules)
 * 1:2218 <-> DISABLED <-> WEB-CGI service.cgi access (web-cgi.rules)
 * 1:2219 <-> DISABLED <-> WEB-CGI setpasswd.cgi access (web-cgi.rules)
 * 1:2220 <-> DISABLED <-> WEB-CGI simplestmail.cgi access (web-cgi.rules)
 * 1:2221 <-> DISABLED <-> WEB-CGI ws_mail.cgi access (web-cgi.rules)
 * 1:2222 <-> DISABLED <-> WEB-CGI nph-exploitscanget.cgi access (web-cgi.rules)
 * 1:2223 <-> DISABLED <-> WEB-CGI csNews.cgi access (web-cgi.rules)
 * 1:2224 <-> DISABLED <-> WEB-CGI psunami.cgi access (web-cgi.rules)
 * 1:2225 <-> DISABLED <-> WEB-CGI gozila.cgi access (web-cgi.rules)
 * 1:2228 <-> DISABLED <-> WEB-PHP phpMyAdmin db_details_importdocsql.php access (web-php.rules)
 * 1:2247 <-> DISABLED <-> WEB-IIS UploadScript11.asp access (web-iis.rules)
 * 1:2248 <-> DISABLED <-> WEB-IIS DirectoryListing.asp access (web-iis.rules)
 * 1:2249 <-> DISABLED <-> WEB-IIS /pcadmin/login.asp access (web-iis.rules)
 * 1:2279 <-> DISABLED <-> WEB-PHP UpdateClasses.php access (web-php.rules)
 * 1:2280 <-> DISABLED <-> WEB-PHP Title.php access (web-php.rules)
 * 1:2281 <-> DISABLED <-> WEB-PHP Setup.php access (web-php.rules)
 * 1:2282 <-> DISABLED <-> WEB-PHP GlobalFunctions.php access (web-php.rules)
 * 1:2283 <-> DISABLED <-> WEB-PHP DatabaseFunctions.php access (web-php.rules)
 * 1:2285 <-> DISABLED <-> WEB-PHP rolis guestbook access (web-php.rules)
 * 1:2286 <-> DISABLED <-> WEB-PHP friends.php access (web-php.rules)
 * 1:2287 <-> DISABLED <-> WEB-PHP Advanced Poll admin_comment.php access (web-php.rules)
 * 1:2288 <-> DISABLED <-> WEB-PHP Advanced Poll admin_edit.php access (web-php.rules)
 * 1:2289 <-> DISABLED <-> WEB-PHP Advanced Poll admin_embed.php access (web-php.rules)
 * 1:2290 <-> DISABLED <-> WEB-PHP Advanced Poll admin_help.php access (web-php.rules)
 * 1:2291 <-> DISABLED <-> WEB-PHP Advanced Poll admin_license.php access (web-php.rules)
 * 1:2292 <-> DISABLED <-> WEB-PHP Advanced Poll admin_logout.php access (web-php.rules)
 * 1:2293 <-> DISABLED <-> WEB-PHP Advanced Poll admin_password.php access (web-php.rules)
 * 1:2294 <-> DISABLED <-> WEB-PHP Advanced Poll admin_preview.php access (web-php.rules)
 * 1:2295 <-> DISABLED <-> WEB-PHP Advanced Poll admin_settings.php access (web-php.rules)
 * 1:2296 <-> DISABLED <-> WEB-PHP Advanced Poll admin_stats.php access (web-php.rules)
 * 1:2297 <-> DISABLED <-> WEB-PHP Advanced Poll admin_templates_misc.php access (web-php.rules)
 * 1:2298 <-> DISABLED <-> WEB-PHP Advanced Poll admin_templates.php access (web-php.rules)
 * 1:2299 <-> DISABLED <-> WEB-PHP Advanced Poll admin_tpl_misc_new.php access (web-php.rules)
 * 1:2300 <-> DISABLED <-> WEB-PHP Advanced Poll admin_tpl_new.php access (web-php.rules)
 * 1:2301 <-> DISABLED <-> WEB-PHP Advanced Poll booth.php access (web-php.rules)
 * 1:23011 <-> ENABLED <-> FILE-IDENTIFY Collada file download request (file-identify.rules)
 * 1:2302 <-> DISABLED <-> WEB-PHP Advanced Poll poll_ssi.php access (web-php.rules)
 * 1:2304 <-> DISABLED <-> WEB-PHP files.inc.php access (web-php.rules)
 * 1:23048 <-> DISABLED <-> WEB-ACTIVEX McAFee Virtual Technician Security Bypass ActiveX clsid attempt (web-activex.rules)
 * 1:23049 <-> DISABLED <-> WEB-ACTIVEX McAFee Virtual Technician Security Bypass ActiveX function call attempt (web-activex.rules)
 * 1:2305 <-> DISABLED <-> WEB-PHP chatbox.php access (web-php.rules)
 * 1:23050 <-> DISABLED <-> WEB-ACTIVEX McAFee Virtual Technician Security Bypass ActiveX function call attempt (web-activex.rules)
 * 1:23110 <-> DISABLED <-> WEB-CLIENT Microsoft Windows graphics rendering engine buffer overflow attempt (web-client.rules)
 * 1:23114 <-> ENABLED <-> INDICATOR-OBFUSCATION GIF header with PHP tags - likely malicious (indicator-obfuscation.rules)
 * 1:23150 <-> DISABLED <-> FILE-OFFICE Microsoft Office Excel malformed graphic record code execution attempt (file-office.rules)
 * 1:23167 <-> ENABLED <-> FILE-IDENTIFY MPG video stream file download request (file-identify.rules)
 * 1:23174 <-> DISABLED <-> WEB-ACTIVEX IBM Lotus Quickr ActiveX stack buffer overflow attempt (web-activex.rules)
 * 1:23175 <-> DISABLED <-> WEB-ACTIVEX IBM Lotus Quickr ActiveX stack buffer overflow attempt (web-activex.rules)
 * 1:23186 <-> DISABLED <-> WEB-ACTIVEX Dell CrazyTalk.DLL ActiveX clsid access (web-activex.rules)
 * 1:23187 <-> ENABLED <-> FILE-IDENTIFY Windows Media Metafile file download request (file-identify.rules)
 * 1:23190 <-> ENABLED <-> FILE-IDENTIFY Windows Media Metafile file download request (file-identify.rules)
 * 1:23193 <-> ENABLED <-> FILE-IDENTIFY Windows Media Metafile file download request (file-identify.rules)
 * 1:23196 <-> ENABLED <-> FILE-IDENTIFY Windows Media Metafile file download request (file-identify.rules)
 * 1:23199 <-> ENABLED <-> FILE-IDENTIFY Windows Media Metafile file download request (file-identify.rules)
 * 1:23202 <-> ENABLED <-> FILE-IDENTIFY Windows Media Metafile file download request (file-identify.rules)
 * 1:23205 <-> ENABLED <-> FILE-IDENTIFY Windows Media Metafile file download request (file-identify.rules)
 * 1:2321 <-> DISABLED <-> WEB-IIS foxweb.exe access (web-iis.rules)
 * 1:2322 <-> DISABLED <-> WEB-IIS foxweb.dll access (web-iis.rules)
 * 1:23228 <-> DISABLED <-> WEB-ACTIVEX Oracle Webcenter ActiveX clsid access (web-activex.rules)
 * 1:23229 <-> DISABLED <-> WEB-ACTIVEX Oracle Webcenter ActiveX function call access (web-activex.rules)
 * 1:2323 <-> DISABLED <-> WEB-CGI quickstore.cgi access (web-cgi.rules)
 * 1:2324 <-> DISABLED <-> WEB-IIS VP-ASP shopsearch.asp access (web-iis.rules)
 * 1:2325 <-> DISABLED <-> WEB-IIS VP-ASP ShopDisplayProducts.asp access (web-iis.rules)
 * 1:2326 <-> DISABLED <-> WEB-IIS sgdynamo.exe access (web-iis.rules)
 * 1:2328 <-> DISABLED <-> WEB-PHP authentication_index.php access (web-php.rules)
 * 1:23283 <-> DISABLED <-> WEB-ACTIVEX Oracle WebCenter Forms Recognition ActiveX clsid attempt (web-activex.rules)
 * 1:23284 <-> DISABLED <-> WEB-ACTIVEX Oracle WebCenter Forms Recognition ActiveX function call attempt (web-activex.rules)
 * 1:2331 <-> DISABLED <-> WEB-PHP MatrikzGB privilege escalation attempt (web-php.rules)
 * 1:23319 <-> ENABLED <-> FILE-IDENTIFY TAR file download request (file-identify.rules)
 * 1:23322 <-> ENABLED <-> FILE-IDENTIFY TAR file download request (file-identify.rules)
 * 1:23347 <-> ENABLED <-> FILE-IDENTIFY Lotus file download request (file-identify.rules)
 * 1:23372 <-> ENABLED <-> WEB-ACTIVEX Teechart Professional ActiveX clsid access (web-activex.rules)
 * 1:23373 <-> ENABLED <-> WEB-ACTIVEX Teechart Professional ActiveX clsid access (web-activex.rules)
 * 1:23374 <-> ENABLED <-> WEB-ACTIVEX Teechart Professional ActiveX clsid access (web-activex.rules)
 * 1:23375 <-> ENABLED <-> WEB-ACTIVEX Teechart Professional ActiveX clsid access (web-activex.rules)
 * 1:23376 <-> ENABLED <-> WEB-ACTIVEX Teechart Professional ActiveX clsid access (web-activex.rules)
 * 1:23395 <-> DISABLED <-> WEB-ACTIVEX Quest InTrust Annotation Objects ActiveX clsid access attempt (web-activex.rules)
 * 1:23396 <-> DISABLED <-> WEB-ACTIVEX Quest InTrust Annotation Objects ActiveX function call access attempt (web-activex.rules)
 * 1:23409 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23410 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23411 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23412 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23413 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23414 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23415 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23416 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23417 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23418 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23419 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23420 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23421 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23422 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23423 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23424 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23425 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23426 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23427 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23428 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23429 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23430 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23431 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:23432 <-> DISABLED <-> WEB-ACTIVEX Veritas Storage Exec ActiveX clsid access attempt (web-activex.rules)
 * 1:2346 <-> DISABLED <-> WEB-PHP myPHPNuke chatheader.php access (web-php.rules)
 * 1:2347 <-> DISABLED <-> WEB-PHP myPHPNuke partner.php access (web-php.rules)
 * 1:23470 <-> DISABLED <-> WEB-ACTIVEX StoneTrip S3DPlayer ActiveX clsid access attempt (web-activex.rules)
 * 1:23471 <-> DISABLED <-> WEB-CLIENT Google Chrome net-internals uri fragment identifier XSS attempt (web-client.rules)
 * 1:23589 <-> ENABLED <-> FILE-OTHER Microsoft Windows GDI+ TIFF file parsing heap overflow attempt (file-other.rules)
 * 1:23626 <-> ENABLED <-> WEB-IIS cmd.exe access (web-iis.rules)
 * 1:2363 <-> DISABLED <-> WEB-PHP Cyboards default_header.php access (web-php.rules)
 * 1:23639 <-> ENABLED <-> FILE-IDENTIFY MPEG video stream file magic detected (file-identify.rules)
 * 1:2364 <-> DISABLED <-> WEB-PHP Cyboards options_form.php access (web-php.rules)
 * 1:23640 <-> ENABLED <-> FILE-IDENTIFY MPEG sys stream file magic detected (file-identify.rules)
 * 1:23641 <-> ENABLED <-> FILE-IDENTIFY GZip file magic detected (file-identify.rules)
 * 1:23642 <-> ENABLED <-> FILE-IDENTIFY Script encoder file magic detected (file-identify.rules)
 * 1:23643 <-> ENABLED <-> FILE-IDENTIFY Postscript file magic detected (file-identify.rules)
 * 1:23645 <-> ENABLED <-> FILE-IDENTIFY RealNetworks Real Media file magic detected (file-identify.rules)
 * 1:23646 <-> ENABLED <-> FILE-IDENTIFY bzip file magic detected (file-identify.rules)
 * 1:23647 <-> ENABLED <-> FILE-IDENTIFY GIF file magic detected (file-identify.rules)
 * 1:23648 <-> ENABLED <-> FILE-IDENTIFY MP3 file magic detected (file-identify.rules)
 * 1:23649 <-> ENABLED <-> FILE-IDENTIFY Microsoft Windows CAB file magic detected (file-identify.rules)
 * 1:23650 <-> ENABLED <-> FILE-IDENTIFY Ogg Stream file magic detected (file-identify.rules)
 * 1:23651 <-> ENABLED <-> FILE-IDENTIFY ZIP file magic detected (file-identify.rules)
 * 1:23652 <-> ENABLED <-> FILE-IDENTIFY ZIP file magic detected (file-identify.rules)
 * 1:23653 <-> ENABLED <-> FILE-IDENTIFY ZIP file magic detected (file-identify.rules)
 * 1:23654 <-> ENABLED <-> FILE-IDENTIFY ZIP file magic detected (file-identify.rules)
 * 1:23655 <-> ENABLED <-> FILE-IDENTIFY ZIP file magic detected (file-identify.rules)
 * 1:23656 <-> ENABLED <-> FILE-IDENTIFY ZIP file magic detected (file-identify.rules)
 * 1:23657 <-> ENABLED <-> FILE-IDENTIFY ZIP file magic detected (file-identify.rules)
 * 1:23658 <-> ENABLED <-> FILE-IDENTIFY RIFX file magic detected (file-identify.rules)
 * 1:23659 <-> ENABLED <-> FILE-IDENTIFY RAR file magic detected (file-identify.rules)
 * 1:23660 <-> ENABLED <-> FILE-IDENTIFY Symantec file magic detected (file-identify.rules)
 * 1:23661 <-> ENABLED <-> FILE-IDENTIFY ARJ file magic detected (file-identify.rules)
 * 1:23662 <-> ENABLED <-> FILE-IDENTIFY TNEF file magic detected (file-identify.rules)
 * 1:23663 <-> ENABLED <-> FILE-IDENTIFY ELF file magic detected (file-identify.rules)
 * 1:23664 <-> ENABLED <-> FILE-IDENTIFY PNG file magic detected (file-identify.rules)
 * 1:23665 <-> ENABLED <-> FILE-IDENTIFY CryptFF file magic detected (file-identify.rules)
 * 1:23666 <-> ENABLED <-> FILE-IDENTIFY MP3 file magic detected (file-identify.rules)
 * 1:23667 <-> ENABLED <-> FILE-IDENTIFY JPEG file magic detected (file-identify.rules)
 * 1:23668 <-> ENABLED <-> FILE-IDENTIFY SIS file magic detected (file-identify.rules)
 * 1:23669 <-> ENABLED <-> FILE-IDENTIFY SIP log file magic detected (file-identify.rules)
 * 1:23671 <-> ENABLED <-> FILE-IDENTIFY 7zip file magic detected (file-identify.rules)
 * 1:23672 <-> ENABLED <-> FILE-IDENTIFY MachO Little Endian file magic detected (file-identify.rules)
 * 1:23673 <-> ENABLED <-> FILE-IDENTIFY MachO x64 Little Endian file magic detected (file-identify.rules)
 * 1:23674 <-> ENABLED <-> FILE-IDENTIFY MachO Big Endian file magic detected (file-identify.rules)
 * 1:23675 <-> ENABLED <-> FILE-IDENTIFY MachO x64 Big Endian file magic detected (file-identify.rules)
 * 1:23676 <-> ENABLED <-> FILE-IDENTIFY Universal Binary/Java Bytecode file magic detected (file-identify.rules)
 * 1:23677 <-> ENABLED <-> FILE-IDENTIFY jarpack file magic detected (file-identify.rules)
 * 1:23678 <-> ENABLED <-> FILE-IDENTIFY PDF file magic detected (file-identify.rules)
 * 1:23679 <-> ENABLED <-> FILE-IDENTIFY compressed Adobe Shockwave Flash file magic detected (file-identify.rules)
 * 1:23681 <-> ENABLED <-> FILE-IDENTIFY Adobe Shockwave Flash file magic detected (file-identify.rules)
 * 1:23682 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:23683 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:23684 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:23685 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:23686 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:23687 <-> ENABLED <-> FILE-IDENTIFY Adobe Shockwave Flash file magic detected (file-identify.rules)
 * 1:23688 <-> ENABLED <-> FILE-IDENTIFY bcproj file magic detected (file-identify.rules)
 * 1:23689 <-> ENABLED <-> FILE-IDENTIFY mx4 file magic detected (file-identify.rules)
 * 1:23690 <-> ENABLED <-> FILE-IDENTIFY ffmpeg file magic detected (file-identify.rules)
 * 1:23691 <-> ENABLED <-> FILE-IDENTIFY dmg file magic detected (file-identify.rules)
 * 1:23692 <-> ENABLED <-> FILE-IDENTIFY ivr file magic detected (file-identify.rules)
 * 1:23693 <-> ENABLED <-> FILE-IDENTIFY caff file magic detected (file-identify.rules)
 * 1:23694 <-> ENABLED <-> FILE-IDENTIFY vmd file magic detected (file-identify.rules)
 * 1:23695 <-> ENABLED <-> FILE-IDENTIFY Flac file magic detected (file-identify.rules)
 * 1:23697 <-> ENABLED <-> FILE-IDENTIFY Microsoft Office Excel xlw file magic detected (file-identify.rules)
 * 1:23698 <-> ENABLED <-> FILE-IDENTIFY Microsoft Windows Media ASF file magic detected (file-identify.rules)
 * 1:23699 <-> DISABLED <-> FILE-IDENTIFY SAP Crystal Reports file magic detected (file-identify.rules)
 * 1:23700 <-> DISABLED <-> FILE-IDENTIFY Microsoft Word for Mac 5 file magic detected (file-identify.rules)
 * 1:23701 <-> ENABLED <-> FILE-IDENTIFY Microsoft SYmbolic LinK file magic detected (file-identify.rules)
 * 1:23702 <-> DISABLED <-> FILE-IDENTIFY WordPerfect file magic detected (file-identify.rules)
 * 1:23703 <-> ENABLED <-> FILE-IDENTIFY Microsoft asf file magic detected (file-identify.rules)
 * 1:23709 <-> ENABLED <-> FILE-IDENTIFY Tiff little endian file magic detected (file-identify.rules)
 * 1:23710 <-> ENABLED <-> FILE-IDENTIFY Tiff big endian file magic detected (file-identify.rules)
 * 1:23711 <-> ENABLED <-> FILE-IDENTIFY OLE Document file magic detected (file-identify.rules)
 * 1:23712 <-> ENABLED <-> FILE-IDENTIFY Microsoft Office Excel file magic detected (file-identify.rules)
 * 1:23713 <-> DISABLED <-> FILE-IDENTIFY Metastock mwl file magic detected (file-identify.rules)
 * 1:23714 <-> ENABLED <-> FILE-IDENTIFY Microsoft Office Publisher file magic detected (file-identify.rules)
 * 1:23719 <-> ENABLED <-> FILE-IDENTIFY Apple Mach-O executable file magic detected (file-identify.rules)
 * 1:2372 <-> DISABLED <-> WEB-PHP Photopost PHP Pro showphoto.php access (web-php.rules)
 * 1:23720 <-> ENABLED <-> FILE-IDENTIFY RealNetworks Realplayer REC file magic detected (file-identify.rules)
 * 1:23721 <-> ENABLED <-> FILE-IDENTIFY RealNetworks Realplayer .r1m file magic detected (file-identify.rules)
 * 1:23723 <-> ENABLED <-> FILE-IDENTIFY M3U file magic detected (file-identify.rules)
 * 1:23729 <-> ENABLED <-> FILE-IDENTIFY PICT file magic detected (file-identify.rules)
 * 1:23730 <-> ENABLED <-> FILE-IDENTIFY amf file magic detected (file-identify.rules)
 * 1:23731 <-> ENABLED <-> FILE-IDENTIFY CDR file magic detected (file-identify.rules)
 * 1:23733 <-> ENABLED <-> FILE-IDENTIFY webm file magic detected (file-identify.rules)
 * 1:23734 <-> ENABLED <-> FILE-IDENTIFY Autodesk Maya file magic detected (file-identify.rules)
 * 1:23736 <-> ENABLED <-> FILE-IDENTIFY PLS file magic detected (file-identify.rules)
 * 1:23737 <-> ENABLED <-> FILE-IDENTIFY SMIL file magic detected (file-identify.rules)
 * 1:23738 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:23739 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:23740 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:23741 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:23742 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:23743 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:23744 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:23745 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:23746 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:23747 <-> ENABLED <-> FILE-IDENTIFY MOV file magic detected (file-identify.rules)
 * 1:23757 <-> ENABLED <-> FILE-IDENTIFY Microsoft Windows CHM file magic detected (file-identify.rules)
 * 1:23760 <-> ENABLED <-> FILE-IDENTIFY WAV file magic detected (file-identify.rules)
 * 1:23761 <-> ENABLED <-> FILE-IDENTIFY AVI file magic detected (file-identify.rules)
 * 1:23798 <-> ENABLED <-> SPECIFIC-THREATS Malvertising redirection page (specific-threats.rules)
 * 1:23807 <-> ENABLED <-> FILE-IDENTIFY JPEG2000 file download request (file-identify.rules)
 * 1:23810 <-> ENABLED <-> FILE-IDENTIFY JPEG2000 file download request (file-identify.rules)
 * 1:23813 <-> ENABLED <-> FILE-IDENTIFY JPEG2000 file download request (file-identify.rules)
 * 1:23816 <-> ENABLED <-> FILE-IDENTIFY JPEG2000 file download request (file-identify.rules)
 * 1:23819 <-> ENABLED <-> FILE-IDENTIFY JPEG2000 file download request (file-identify.rules)
 * 1:23857 <-> DISABLED <-> SMTP heapspray characters detected - ASCII (smtp.rules)
 * 1:23858 <-> DISABLED <-> SMTP heapspray characters detected - binary (smtp.rules)
 * 1:23859 <-> DISABLED <-> SMTP heapspray characters detected - hexadecimal encoding (smtp.rules)
 * 1:23860 <-> DISABLED <-> WEB-CLIENT heapspray characters detected - ASCII (web-client.rules)
 * 1:23861 <-> DISABLED <-> WEB-CLIENT heapspray characters detected - binary (web-client.rules)
 * 1:23862 <-> DISABLED <-> WEB-CLIENT heapspray characters detected - hexadecimal encoding (web-client.rules)
 * 1:2387 <-> DISABLED <-> WEB-CGI view_broadcast.cgi access (web-cgi.rules)
 * 1:2388 <-> DISABLED <-> WEB-CGI streaming server view_broadcast.cgi access (web-cgi.rules)
 * 1:2393 <-> DISABLED <-> WEB-PHP /_admin access (web-php.rules)
 * 1:2396 <-> DISABLED <-> WEB-CGI CCBill whereami.cgi arbitrary command execution attempt (web-cgi.rules)
 * 1:2397 <-> DISABLED <-> WEB-CGI CCBill whereami.cgi access (web-cgi.rules)
 * 1:2399 <-> DISABLED <-> WEB-PHP WAnewsletter db_type.php access (web-php.rules)
 * 1:2405 <-> DISABLED <-> WEB-PHP phptest.php access (web-php.rules)
 * 1:2410 <-> DISABLED <-> WEB-PHP IGeneric Free Shopping Cart page.php access (web-php.rules)
 * 1:2485 <-> DISABLED <-> WEB-ACTIVEX Symantec Norton Internet Security 2004 ActiveX clsid access (web-activex.rules)
 * 1:2565 <-> DISABLED <-> WEB-PHP modules.php access (web-php.rules)
 * 1:2567 <-> DISABLED <-> WEB-CGI Emumail init.emu access (web-cgi.rules)
 * 1:2568 <-> DISABLED <-> WEB-CGI Emumail emumail.fcgi access (web-cgi.rules)
 * 1:2571 <-> DISABLED <-> WEB-IIS SmarterTools SmarterMail frmGetAttachment.aspx access (web-iis.rules)
 * 1:2573 <-> DISABLED <-> WEB-IIS SmarterTools SmarterMail frmCompose.asp access (web-iis.rules)
 * 1:2657 <-> DISABLED <-> WEB-MISC SSLv2 Client_Hello with pad Challenge Length overflow attempt (web-misc.rules)
 * 1:2667 <-> DISABLED <-> WEB-IIS ping.asp access (web-iis.rules)
 * 1:2668 <-> DISABLED <-> WEB-CGI processit access (web-cgi.rules)
 * 1:2669 <-> DISABLED <-> WEB-CGI ibillpm.pl access (web-cgi.rules)
 * 1:3007 <-> DISABLED <-> IMAP command overflow attempt (imap.rules)
 * 1:3087 <-> DISABLED <-> WEB-IIS w3who.dll buffer overflow attempt (web-iis.rules)
 * 1:3158 <-> ENABLED <-> NETBIOS DCERPC NCACN-IP-TCP ISystemActivator CoGetInstanceFromFile attempt (netbios.rules)
 * 1:3159 <-> ENABLED <-> NETBIOS DCERPC NCADG-IP-UDP ISystemActivator CoGetInstanceFromFile attempt (netbios.rules)
 * 1:3193 <-> DISABLED <-> WEB-IIS .cmd executable file parsing attack (web-iis.rules)
 * 1:3194 <-> DISABLED <-> WEB-IIS .bat executable file parsing attack (web-iis.rules)
 * 1:3201 <-> DISABLED <-> WEB-IIS httpodbc.dll access - nimda (web-iis.rules)
 * 1:3397 <-> ENABLED <-> NETBIOS DCERPC NCACN-IP-TCP ISystemActivator RemoteCreateInstance attempt (netbios.rules)
 * 1:3398 <-> ENABLED <-> NETBIOS DCERPC NCADG-IP-UDP ISystemActivator RemoteCreateInstance attempt (netbios.rules)
 * 1:3463 <-> DISABLED <-> WEB-CGI awstats access (web-cgi.rules)
 * 1:3469 <-> DISABLED <-> WEB-CGI Ipswitch WhatsUp Gold dos attempt (web-cgi.rules)
 * 1:3590 <-> DISABLED <-> NETBIOS DCERPC NCACN-IP-TCP mqqm QMDeleteObject overflow attempt (netbios.rules)
 * 1:3591 <-> DISABLED <-> NETBIOS DCERPC NCADG-IP-UDP mqqm QMDeleteObject overflow attempt (netbios.rules)
 * 1:3632 <-> DISABLED <-> WEB-CLIENT Microsoft Windows Bitmap width integer overflow attempt (web-client.rules)
 * 1:3638 <-> DISABLED <-> WEB-CGI SoftCart.exe CGI buffer overflow attempt (web-cgi.rules)
 * 1:3664 <-> DISABLED <-> EXPLOIT PPTP echo request buffer overflow attempt (exploit.rules)
 * 1:3674 <-> DISABLED <-> WEB-CGI db4web_c directory traversal attempt (web-cgi.rules)
 * 1:3820 <-> ENABLED <-> FILE-IDENTIFY Microsoft Windows CHM file magic detected (file-identify.rules)
 * 1:3827 <-> DISABLED <-> WEB-PHP xmlrpc.php post attempt (web-php.rules)
 * 1:4128 <-> DISABLED <-> WEB-CGI 4DWebstar ShellExample.cgi information disclosure (web-cgi.rules)
 * 1:4145 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Trouble Shooter ActiveX object access (web-activex.rules)
 * 1:4146 <-> DISABLED <-> WEB-ACTIVEX Share Point Portal Services Log Sink ActiveX object access (web-activex.rules)
 * 1:4147 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer ActiveLabel ActiveX object access (web-activex.rules)
 * 1:4148 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer  DHTML Editing ActiveX clsid access (web-activex.rules)
 * 1:4151 <-> DISABLED <-> WEB-ACTIVEX System Monitor Source Properties ActiveX object access (web-activex.rules)
 * 1:4152 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Media Player 6.4 ActiveX object access (web-activex.rules)
 * 1:4153 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Eyedog ActiveX object access (web-activex.rules)
 * 1:4154 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Active Setup ActiveX object access (web-activex.rules)
 * 1:4155 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer htmlfile ActiveX object access (web-activex.rules)
 * 1:4156 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Media Player 7+ ActiveX object access (web-activex.rules)
 * 1:4157 <-> DISABLED <-> WEB-ACTIVEX MSN Setup BBS 4.71.0.10 ActiveX object access (web-activex.rules)
 * 1:4158 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Media Player Active Movie ActiveX object access (web-activex.rules)
 * 1:4159 <-> DISABLED <-> WEB-ACTIVEX Multimedia File Property Sheet ActiveX object access (web-activex.rules)
 * 1:4160 <-> DISABLED <-> WEB-ACTIVEX Microsoft Windows Reporting Tool ActiveX object access (web-activex.rules)
 * 1:4161 <-> DISABLED <-> WEB-ACTIVEX DigWebX MSN ActiveX object access (web-activex.rules)
 * 1:4162 <-> DISABLED <-> WEB-ACTIVEX DigWebX MSN ActiveX object access (web-activex.rules)
 * 1:4163 <-> DISABLED <-> WEB-ACTIVEX DigWebX MSN ActiveX object access (web-activex.rules)
 * 1:4164 <-> DISABLED <-> WEB-ACTIVEX DigWebX MSN ActiveX object access (web-activex.rules)
 * 1:4165 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Image Control 1.0 ActiveX object access (web-activex.rules)
 * 1:4167 <-> DISABLED <-> WEB-ACTIVEX MSN Heartbeat ActiveX clsid access (web-activex.rules)
 * 1:4168 <-> DISABLED <-> WEB-ACTIVEX Shell Automation Service ActiveX object access (web-activex.rules)
 * 1:4169 <-> DISABLED <-> WEB-ACTIVEX Microsoft Internet Explorer Active Setup ActiveX object access (web-activex.rules)