Sourcefire VRT Update

Date: 2006-10-11

This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack.

The format of the file is:

sid - Message (rule group)

New rules:
8444 <-> Disabled <-> WEB-MISC Trend Micro atxconsole format string server response attempt (web-misc.rules)
8445 <-> Disabled <-> WEB-CLIENT RTF file with embedded object package download attempt (web-client.rules)
8446 <-> Disabled <-> POLICY IPv6 encapsulated in IPv4 activity (policy.rules)
8447 <-> Disabled <-> WEB-CLIENT Open document file transfer attempt (web-client.rules)
8448 <-> Disabled <-> WEB-CLIENT Excel colinfo XF record overflow attempt (web-client.rules)
8449 <-> Enabled  <-> NETBIOS SMB Rename invalid buffer type andx attempt (netbios.rules)
8450 <-> Enabled  <-> NETBIOS SMB Rename invalid buffer type attempt (netbios.rules)
8451 <-> Enabled  <-> NETBIOS SMB Rename invalid buffer type unicode andx attempt (netbios.rules)
8452 <-> Enabled  <-> NETBIOS SMB Rename invalid buffer type unicode attempt (netbios.rules)
8453 <-> Enabled  <-> NETBIOS SMB-DS Rename invalid buffer type andx attempt (netbios.rules)
8454 <-> Enabled  <-> NETBIOS SMB-DS Rename invalid buffer type attempt (netbios.rules)
8455 <-> Enabled  <-> NETBIOS SMB-DS Rename invalid buffer type unicode andx attempt (netbios.rules)
8456 <-> Enabled  <-> NETBIOS SMB-DS Rename invalid buffer type unicode attempt (netbios.rules)
8457 <-> Enabled  <-> NETBIOS-DG SMB Rename invalid buffer type andx attempt (netbios.rules)
8458 <-> Enabled  <-> NETBIOS-DG SMB Rename invalid buffer type attempt (netbios.rules)
8459 <-> Enabled  <-> NETBIOS-DG SMB Rename invalid buffer type unicode andx attempt (netbios.rules)
8460 <-> Enabled  <-> NETBIOS-DG SMB Rename invalid buffer type unicode attempt (netbios.rules)

Updated rules:
 153 <-> Disabled <-> DELETED BACKDOOR DonaldDick 1.53 Traffic (deleted.rules)
 830 <-> Disabled <-> DELETED WEB-CGI NPH-publish access (deleted.rules)
 841 <-> Disabled <-> DELETED WEB-CGI pfdisplay.cgi access (deleted.rules)
 974 <-> Disabled <-> WEB-IIS Directory transversal attempt (web-iis.rules)
 976 <-> Disabled <-> WEB-IIS .bat? access (web-iis.rules)
 977 <-> Disabled <-> WEB-IIS .cnf access (web-iis.rules)
 980 <-> Disabled <-> WEB-IIS CGImail.exe access (web-iis.rules)
 986 <-> Disabled <-> WEB-IIS MSProxy access (web-iis.rules)
 991 <-> Disabled <-> WEB-IIS achg.htr access (web-iis.rules)
 994 <-> Disabled <-> WEB-IIS /scripts/iisadmin/default.htm access (web-iis.rules)
 995 <-> Disabled <-> WEB-IIS ism.dll access (web-iis.rules)
 996 <-> Disabled <-> WEB-IIS anot.htr access (web-iis.rules)
1007 <-> Disabled <-> WEB-IIS Form_JScript.asp access (web-iis.rules)
1010 <-> Disabled <-> WEB-IIS encoding access (web-iis.rules)
1029 <-> Disabled <-> WEB-IIS scripts-browse access (web-iis.rules)
1075 <-> Disabled <-> WEB-IIS postinfo.asp access (web-iis.rules)
1076 <-> Disabled <-> WEB-IIS repost.asp access (web-iis.rules)
1242 <-> Disabled <-> WEB-IIS ISAPI .ida access (web-iis.rules)
1380 <-> Disabled <-> WEB-IIS Form_VBScript.asp access (web-iis.rules)
1485 <-> Disabled <-> WEB-IIS mkilog.exe access (web-iis.rules)
1486 <-> Disabled <-> WEB-IIS ctss.idc access (web-iis.rules)
1632 <-> Disabled <-> DELETED CHAT AIM send message (deleted.rules)
1656 <-> Enabled  <-> WEB-CGI pfdispaly.cgi access (web-cgi.rules)
1660 <-> Disabled <-> WEB-IIS trace.axd access (web-iis.rules)
1750 <-> Disabled <-> WEB-IIS users.xml access (web-iis.rules)
1753 <-> Disabled <-> WEB-IIS as_web.exe access (web-iis.rules)
1754 <-> Disabled <-> WEB-IIS as_web4.exe access (web-iis.rules)
1772 <-> Disabled <-> WEB-IIS pbserver access (web-iis.rules)
1812 <-> Enabled  <-> EXPLOIT gobbles SSH exploit attempt (exploit.rules)
1970 <-> Enabled  <-> WEB-IIS MDAC Content-Type overflow attempt (web-iis.rules)
2117 <-> Disabled <-> WEB-IIS Battleaxe Forum login.asp access (web-iis.rules)
2133 <-> Disabled <-> WEB-IIS MS BizTalk server access (web-iis.rules)
2134 <-> Disabled <-> WEB-IIS register.asp access (web-iis.rules)
2249 <-> Disabled <-> WEB-IIS /pcadmin/login.asp access (web-iis.rules)
2251 <-> Disabled <-> DELETED NETBIOS DCERPC Remote Activation bind attempt (deleted.rules)
2321 <-> Disabled <-> WEB-IIS foxweb.exe access (web-iis.rules)
2322 <-> Disabled <-> WEB-IIS foxweb.dll access (web-iis.rules)
2324 <-> Disabled <-> WEB-IIS VP-ASP shopsearch.asp access (web-iis.rules)
2325 <-> Disabled <-> WEB-IIS VP-ASP ShopDisplayProducts.asp access (web-iis.rules)
2326 <-> Disabled <-> WEB-IIS sgdynamo.exe access (web-iis.rules)
2374 <-> Enabled  <-> FTP NLST overflow attempt (ftp.rules)
2375 <-> Disabled <-> BACKDOOR DoomJuice/mydoom.a backdoor upload/execute attempt (backdoor.rules)
2571 <-> Disabled <-> WEB-IIS SmarterTools SmarterMail frmGetAttachment.aspx access (web-iis.rules)
2573 <-> Disabled <-> WEB-IIS SmarterTools SmarterMail frmCompose.asp access (web-iis.rules)
2622 <-> Disabled <-> DELETED ORACLE dbms_repcat_utl.drop_an_object buffer overflow attempt (deleted.rules)
2623 <-> Disabled <-> DELETED ORACLE dbms_repcat_sna_utl.create_snapshot_repgroup buffer overflow attempt (deleted.rules)
2631 <-> Disabled <-> DELETED ORACLE dbms_repcat.refresh_mview_repgroup buffer overflow attempt (deleted.rules)
2635 <-> Disabled <-> DELETED ORACLE dbms_offline_snapshot.end_load buffer overflow attempt (deleted.rules)
2647 <-> Disabled <-> DELETED ORACLE dbms_repcat_instantiate.instantiate_online buffer overflow attempt (deleted.rules)
2652 <-> Enabled  <-> ORACLE dbms_offline_og.begin_load buffer overflow attempt (oracle.rules)
2676 <-> Disabled <-> DELETED ORACLE dbms_repcat_rgt.drop_site_instantiation buffer overflow attempt (deleted.rules)
2686 <-> Disabled <-> DELETED ORACLE sys.dbms_rectifier_diff.differences buffer overflow attempt (deleted.rules)
2700 <-> Disabled <-> DELETED ORACLE numtoyminterval buffer overflow attempt (deleted.rules)
2710 <-> Disabled <-> DELETED ORACLE dbms_offline_og.begin_load buffer overflow attempt (deleted.rules)
2716 <-> Enabled  <-> ORACLE dbms_offline_snapshot.end_load buffer overflow attempt (oracle.rules)
2717 <-> Enabled  <-> ORACLE dbms_rectifier_diff.differences buffer overflow attempt (oracle.rules)
2794 <-> Enabled  <-> ORACLE dbms_repcat.refresh_mview_repgroup buffer overflow attempt (oracle.rules)
2841 <-> Enabled  <-> ORACLE sys.dbms_repcat_sna_utl.create_snapshot_repgroup buffer overflow attempt (oracle.rules)
2849 <-> Enabled  <-> ORACLE sys.dbms_repcat_utl.drop_an_object buffer overflow attempt (oracle.rules)
3272 <-> Disabled <-> DELETED BACKDOOR mydoom.a backdoor upload/execute attempt (deleted.rules)
3825 <-> Disabled <-> POLICY AOL Instant Messenger Message Send (policy.rules)
5856 <-> Disabled <-> DELETED SPYWARE-PUT Hijacker funbuddyicons runtime detection - funwebproducts user-agent string (deleted.rules)
5912 <-> Disabled <-> DELETED SPYWARE-PUT Hijacker webcrawler runtime detection (deleted.rules)
6414 <-> Disabled <-> WEB-MISC Novell GroupWise Messenger Accept-Language Header Buffer Overflow attempt (web-misc.rules)
7024 <-> Disabled <-> WEB-CLIENT excel style handling overflow attempt (web-client.rules)
7035 <-> Enabled  <-> NETBIOS SMB Trans mailslot heap overflow attempt (netbios.rules)
7036 <-> Enabled  <-> NETBIOS SMB Trans unicode mailslot heap overflow attempt (netbios.rules)
7037 <-> Enabled  <-> NETBIOS SMB-DS Trans mailslot heap overflow attempt (netbios.rules)
7038 <-> Enabled  <-> NETBIOS SMB-DS Trans unicode mailslot heap overflow attempt (netbios.rules)
7039 <-> Enabled  <-> NETBIOS-DG SMB Trans mailslot heap overflow attempt (netbios.rules)
7040 <-> Enabled  <-> NETBIOS-DG SMB Trans unicode mailslot heap overflow attempt (netbios.rules)
7041 <-> Enabled  <-> NETBIOS SMB Trans andx mailslot heap overflow attempt (netbios.rules)
7042 <-> Enabled  <-> NETBIOS SMB Trans unicode andx mailslot heap overflow attempt (netbios.rules)
7043 <-> Enabled  <-> NETBIOS SMB-DS Trans andx mailslot heap overflow attempt (netbios.rules)
7044 <-> Enabled  <-> NETBIOS SMB-DS Trans unicode andx mailslot heap overflow attempt (netbios.rules)
7045 <-> Enabled  <-> NETBIOS-DG SMB Trans andx mailslot heap overflow attempt (netbios.rules)
7046 <-> Enabled  <-> NETBIOS-DG SMB Trans unicode andx mailslot heap overflow attempt (netbios.rules)
7092 <-> Disabled <-> DELETED BACKDOOR uprising screen control 1.0 runtime detection (deleted.rules)
7093 <-> Disabled <-> DELETED BACKDOOR uprising screen control 1.0 runtime detection - init connectiion (deleted.rules)
7094 <-> Disabled <-> DELETED BACKDOOR uprising screen control 1.0 runtime detection (deleted.rules)
7095 <-> Disabled <-> DELETED BACKDOOR uprising screen control 1.0 runtime detection - begin capture (deleted.rules)
7209 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode little endian overflow attempt (netbios.rules)
7210 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize little endian object call overflow attempt (netbios.rules)
7211 <-> Enabled  <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize little endian overflow attempt (netbios.rules)
7212 <-> Enabled  <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX unicode little endian overflow attempt (netbios.rules)
7213 <-> Enabled  <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX unicode overflow attempt (netbios.rules)
7214 <-> Enabled  <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX overflow attempt (netbios.rules)
7215 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode overflow attempt (netbios.rules)
7216 <-> Enabled  <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX little endian overflow attempt (netbios.rules)
7217 <-> Enabled  <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize unicode overflow attempt (netbios.rules)
7218 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX little endian overflow attempt (netbios.rules)
7219 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode little endian object call overflow attempt (netbios.rules)
7220 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX overflow attempt (netbios.rules)
7221 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode little endian object call overflow attempt (netbios.rules)
7222 <-> Enabled  <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize little endian overflow attempt (netbios.rules)
7223 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode overflow attempt (netbios.rules)
7224 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode little endian overflow attempt (netbios.rules)
7225 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX object call overflow attempt (netbios.rules)
7226 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode object call overflow attempt (netbios.rules)
7227 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize little endian object call overflow attempt (netbios.rules)
7228 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode object call overflow attempt (netbios.rules)
7229 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode object call overflow attempt (netbios.rules)
7230 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX object call overflow attempt (netbios.rules)
7231 <-> Enabled  <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize unicode overflow attempt (netbios.rules)
7232 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize overflow attempt (netbios.rules)
7233 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode overflow attempt (netbios.rules)
7234 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode overflow attempt (netbios.rules)
7235 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize little endian overflow attempt (netbios.rules)
7236 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize overflow attempt (netbios.rules)
7237 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize object call overflow attempt (netbios.rules)
7238 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize little endian overflow attempt (netbios.rules)
7239 <-> Enabled  <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX little endian overflow attempt (netbios.rules)
7240 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode little endian overflow attempt (netbios.rules)
7241 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode little endian overflow attempt (netbios.rules)
7242 <-> Enabled  <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX overflow attempt (netbios.rules)
7243 <-> Enabled  <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX unicode little endian overflow attempt (netbios.rules)
7244 <-> Enabled  <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize overflow attempt (netbios.rules)
7245 <-> Enabled  <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize unicode little endian overflow attempt (netbios.rules)
7246 <-> Enabled  <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize overflow attempt (netbios.rules)
7247 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX overflow attempt (netbios.rules)
7248 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize object call overflow attempt (netbios.rules)
7249 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX little endian object call overflow attempt (netbios.rules)
7250 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX little endian overflow attempt (netbios.rules)
7251 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode little endian object call overflow attempt (netbios.rules)
7252 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX little endian object call overflow attempt (netbios.rules)
7253 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode object call overflow attempt (netbios.rules)
7254 <-> Enabled  <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX unicode overflow attempt (netbios.rules)
7255 <-> Enabled  <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize unicode little endian overflow attempt (netbios.rules)
7256 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode little endian object call overflow attempt (netbios.rules)
7257 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode little endian andx overflow attempt (netbios.rules)
7258 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize little endian andx object call overflow attempt (netbios.rules)
7259 <-> Enabled  <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize little endian andx overflow attempt (netbios.rules)
7260 <-> Enabled  <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX unicode little endian andx overflow attempt (netbios.rules)
7261 <-> Enabled  <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX unicode andx overflow attempt (netbios.rules)
7262 <-> Enabled  <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX andx overflow attempt (netbios.rules)
7263 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode andx overflow attempt (netbios.rules)
7264 <-> Enabled  <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX little endian andx overflow attempt (netbios.rules)
7265 <-> Enabled  <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize unicode andx overflow attempt (netbios.rules)
7266 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX little endian andx overflow attempt (netbios.rules)
7267 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode little endian andx object call overflow attempt (netbios.rules)
7268 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX andx overflow attempt (netbios.rules)
7269 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode little endian andx object call overflow attempt (netbios.rules)
7270 <-> Enabled  <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize little endian andx overflow attempt (netbios.rules)
7271 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode andx overflow attempt (netbios.rules)
7272 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode little endian andx overflow attempt (netbios.rules)
7273 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX andx object call overflow attempt (netbios.rules)
7274 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode andx object call overflow attempt (netbios.rules)
7275 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize little endian andx object call overflow attempt (netbios.rules)
7276 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode andx object call overflow attempt (netbios.rules)
7277 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode andx object call overflow attempt (netbios.rules)
7278 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX andx object call overflow attempt (netbios.rules)
7279 <-> Enabled  <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize unicode andx overflow attempt (netbios.rules)
7280 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize andx overflow attempt (netbios.rules)
7281 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode andx overflow attempt (netbios.rules)
7282 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode andx overflow attempt (netbios.rules)
7283 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize little endian andx overflow attempt (netbios.rules)
7284 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize andx overflow attempt (netbios.rules)
7285 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize andx object call overflow attempt (netbios.rules)
7286 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize little endian andx overflow attempt (netbios.rules)
7287 <-> Enabled  <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX little endian andx overflow attempt (netbios.rules)
7288 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode little endian andx overflow attempt (netbios.rules)
7289 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode little endian andx overflow attempt (netbios.rules)
7290 <-> Enabled  <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX andx overflow attempt (netbios.rules)
7291 <-> Enabled  <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX unicode little endian andx overflow attempt (netbios.rules)
7292 <-> Enabled  <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize andx overflow attempt (netbios.rules)
7293 <-> Enabled  <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize unicode little endian andx overflow attempt (netbios.rules)
7294 <-> Enabled  <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize andx overflow attempt (netbios.rules)
7295 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX andx overflow attempt (netbios.rules)
7296 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize andx object call overflow attempt (netbios.rules)
7297 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX little endian andx object call overflow attempt (netbios.rules)
7298 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX little endian andx overflow attempt (netbios.rules)
7299 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode little endian andx object call overflow attempt (netbios.rules)
7300 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX little endian andx object call overflow attempt (netbios.rules)
7301 <-> Enabled  <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode andx object call overflow attempt (netbios.rules)
7302 <-> Enabled  <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX unicode andx overflow attempt (netbios.rules)
7303 <-> Enabled  <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize unicode little endian andx overflow attempt (netbios.rules)
7304 <-> Enabled  <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode little endian andx object call overflow attempt (netbios.rules)
7664 <-> Disabled <-> BACKDOOR screen control 1.0 runtime detection - flowbit set (backdoor.rules)
7665 <-> Disabled <-> BACKDOOR screen control 1.0 runtime detection - initial connection (backdoor.rules)
7667 <-> Disabled <-> BACKDOOR screen control 1.0 runtime detection - capture on port 2208 (backdoor.rules)
7985 <-> Disabled <-> WEB-CLIENT WebViewFolderIcon.WebViewFolderIcon.1 ActiveX CLSID access (web-client.rules)
7986 <-> Disabled <-> WEB-CLIENT WebViewFolderIcon.WebViewFolderIcon.1 ActiveX CLSID unicode access (web-client.rules)
8053 <-> Disabled <-> WEB-CLIENT DirectAnimation.PathControl ActiveX CLSID access (web-client.rules)
8054 <-> Disabled <-> WEB-CLIENT DirectAnimation.PathControl ActiveX CLSID unicode access (web-client.rules)
8055 <-> Disabled <-> WEB-CLIENT DirectAnimation.PathControl ActiveX function call access (web-client.rules)
8419 <-> Disabled <-> WEB-CLIENT WebViewFolderIcon.WebViewFolderIcon.1 ActiveX function call access (web-client.rules)
8443 <-> Disabled <-> WEB-CLIENT Mozilla regular expression heap corruption attempt (web-client.rules)

State change rules:
1233 <-> Disabled <-> WEB-CLIENT Outlook EML access (web-client.rules)
1284 <-> Disabled <-> WEB-CLIENT readme.eml download attempt (web-client.rules)
1290 <-> Disabled <-> WEB-CLIENT readme.eml autoload attempt (web-client.rules)
1735 <-> Disabled <-> WEB-CLIENT XMLHttpRequest attempt (web-client.rules)
1840 <-> Disabled <-> WEB-CLIENT Javascript document.domain attempt (web-client.rules)
2435 <-> Disabled <-> WEB-CLIENT Microsoft emf metafile access (web-client.rules)
2436 <-> Disabled <-> WEB-CLIENT Microsoft wmf metafile access (web-client.rules)
2437 <-> Disabled <-> WEB-CLIENT RealPlayer arbitrary javascript command attempt (web-client.rules)
2438 <-> Disabled <-> WEB-CLIENT RealPlayer playlist file URL overflow attempt (web-client.rules)
2439 <-> Disabled <-> WEB-CLIENT RealPlayer playlist http URL overflow attempt (web-client.rules)
2440 <-> Disabled <-> WEB-CLIENT RealPlayer playlist rtsp URL overflow attempt (web-client.rules)
2485 <-> Disabled <-> WEB-CLIENT Norton antivirus sysmspam.dll load attempt (web-client.rules)
2577 <-> Disabled <-> WEB-CLIENT local resource redirection attempt (web-client.rules)
2589 <-> Disabled <-> WEB-CLIENT Content-Disposition CLSID command attempt (web-client.rules)
2671 <-> Disabled <-> WEB-CLIENT bitmap BitmapOffset integer overflow attempt (web-client.rules)
2673 <-> Disabled <-> WEB-CLIENT libpng tRNS overflow attempt (web-client.rules)
3079 <-> Disabled <-> WEB-CLIENT Microsoft ANI file parsing overflow (web-client.rules)
3088 <-> Disabled <-> WEB-CLIENT winamp .cda file name overflow attempt (web-client.rules)
3132 <-> Disabled <-> WEB-CLIENT PNG large image width download attempt (web-client.rules)
3133 <-> Disabled <-> WEB-CLIENT PNG large image height download attempt (web-client.rules)
3134 <-> Disabled <-> WEB-CLIENT PNG large colour depth download attempt (web-client.rules)
3148 <-> Disabled <-> WEB-CLIENT winhelp clsid attempt (web-client.rules)
3149 <-> Disabled <-> WEB-CLIENT object type overflow attempt (web-client.rules)
3192 <-> Disabled <-> WEB-CLIENT Windows Media Player directory traversal via Content-Disposition attempt (web-client.rules)
3470 <-> Disabled <-> WEB-CLIENT RealPlayer VIDORV30 header length buffer overflow (web-client.rules)
3471 <-> Disabled <-> WEB-CLIENT iTunes playlist URL overflow attempt (web-client.rules)
3473 <-> Disabled <-> WEB-CLIENT RealPlayer SMIL file overflow attempt (web-client.rules)
3550 <-> Disabled <-> WEB-CLIENT HTML http scheme hostname overflow attempt (web-client.rules)
3551 <-> Disabled <-> WEB-CLIENT .hta download attempt (web-client.rules)
3552 <-> Disabled <-> WEB-CLIENT OLE32 MSHTA masquerade attempt (web-client.rules)
3553 <-> Disabled <-> WEB-CLIENT HTML DOM null element insertion attempt (web-client.rules)
3632 <-> Disabled <-> WEB-CLIENT Mozilla bitmap width integer overflow attempt (web-client.rules)
3633 <-> Disabled <-> WEB-CLIENT bitmap transfer (web-client.rules)
3634 <-> Disabled <-> WEB-CLIENT Mozilla bitmap width integer overflow multipacket attempt (web-client.rules)
3683 <-> Disabled <-> WEB-CLIENT spoofed MIME-Type auto-execution attempt (web-client.rules)
3684 <-> Disabled <-> WEB-CLIENT Bitmap Transfer (web-client.rules)
3685 <-> Disabled <-> WEB-CLIENT bitmap BitmapOffset multipacket integer overflow attempt (web-client.rules)
3686 <-> Disabled <-> WEB-CLIENT Internet Explorer Content Advisor attempted overflow (web-client.rules)
3689 <-> Disabled <-> WEB-CLIENT Internet Explorer tRNS overflow attempt (web-client.rules)
3814 <-> Disabled <-> WEB-CLIENT IE javaprxy.dll COM access (web-client.rules)
3819 <-> Disabled <-> WEB-CLIENT multipacket CHM file transfer start (web-client.rules)
3820 <-> Disabled <-> WEB-CLIENT multipacket CHM file transfer attempt (web-client.rules)
3821 <-> Disabled <-> WEB-CLIENT CHM file transfer attempt (web-client.rules)
4132 <-> Disabled <-> WEB-CLIENT msdds clsid attempt (web-client.rules)
4133 <-> Disabled <-> WEB-CLIENT devenum clsid attempt (web-client.rules)
4134 <-> Disabled <-> WEB-CLIENT blnmgr clsid attempt (web-client.rules)
4135 <-> Disabled <-> WEB-CLIENT IE JPEG heap overflow single packet attempt (web-client.rules)
4145 <-> Disabled <-> WEB-CLIENT Windows Trouble Shooter ActiveX Object Access (web-client.rules)
4146 <-> Disabled <-> WEB-CLIENT Share Point Portal Services Log Sink ActiveX Object Access (web-client.rules)
4147 <-> Disabled <-> WEB-CLIENT ActiveLabel ActiveX Object Access (web-client.rules)
4150 <-> Disabled <-> WEB-CLIENT Outlook View ActiveX Object Access (web-client.rules)
4151 <-> Disabled <-> WEB-CLIENT System Monitor Source Properties ActiveX Object Access (web-client.rules)
4152 <-> Disabled <-> WEB-CLIENT Windows Media Player 6.4 ActiveX Object Access (web-client.rules)
4153 <-> Disabled <-> WEB-CLIENT Eyedog ActiveX Object Access (web-client.rules)
4154 <-> Disabled <-> WEB-CLIENT Active Setup ActiveX Object Access (web-client.rules)
4155 <-> Disabled <-> WEB-CLIENT htmlfile ActiveX Object Access (web-client.rules)
4156 <-> Disabled <-> WEB-CLIENT Windows Media Player 7+ ActiveX Object Access (web-client.rules)
4157 <-> Disabled <-> WEB-CLIENT MSN Setup BBS 4.71.0.10 ActiveX Object Access (web-client.rules)
4158 <-> Disabled <-> WEB-CLIENT Windows Media Player Active Movie ActiveX Object Access (web-client.rules)
4159 <-> Disabled <-> WEB-CLIENT Multimedia File Property Sheet ActiveX Object Access (web-client.rules)
4160 <-> Disabled <-> WEB-CLIENT Microsoft Windows Reporting Tool ActiveX Object Access (web-client.rules)
4161 <-> Disabled <-> WEB-CLIENT DigWebX MSN ActiveX Object Access (web-client.rules)
4162 <-> Disabled <-> WEB-CLIENT DigWebX MSN ActiveX Object Access (web-client.rules)
4163 <-> Disabled <-> WEB-CLIENT DigWebX MSN ActiveX Object Access (web-client.rules)
4164 <-> Disabled <-> WEB-CLIENT DigWebX MSN ActiveX Object Access (web-client.rules)
4165 <-> Disabled <-> WEB-CLIENT Image Control 1.0 ActiveX Object Access (web-client.rules)
4166 <-> Disabled <-> WEB-CLIENT Shell.Explorer ActiveX Object Access (web-client.rules)
4167 <-> Disabled <-> WEB-CLIENT MSN Heartbeat ActiveX Object Access (web-client.rules)
4168 <-> Disabled <-> WEB-CLIENT Shell Automation Service ActiveX Object Access (web-client.rules)
4169 <-> Disabled <-> WEB-CLIENT Internet Explorer Active Setup ActiveX Object Access (web-client.rules)
4170 <-> Disabled <-> WEB-CLIENT Office 2000/2002 Web Components Data Source Control ActiveX Object Access (web-client.rules)
4171 <-> Disabled <-> WEB-CLIENT Registration Wizard ActiveX Object Access (web-client.rules)
4172 <-> Disabled <-> WEB-CLIENT Microsoft Agent v1.5 ActiveX Object Access (web-client.rules)
4173 <-> Disabled <-> WEB-CLIENT MsnPUpld ActiveX Object Access (web-client.rules)
4174 <-> Disabled <-> WEB-CLIENT Symantec RuFSI registry Information Class ActiveX Object Access (web-client.rules)
4175 <-> Disabled <-> WEB-CLIENT Office 2000/2002 Web Components PivotTable ActiveX Object Access (web-client.rules)
4176 <-> Disabled <-> WEB-CLIENT Office 2000 and 2002 Web Components Chart ActiveX Object Access (web-client.rules)
4177 <-> Disabled <-> WEB-CLIENT Office 2000 and 2002 Web Components Spreadsheet ActiveX Object Access (web-client.rules)
4178 <-> Disabled <-> WEB-CLIENT Office 2000 and 2002 Web Components Record Navigation Control ActiveX Object Access (web-client.rules)
4179 <-> Disabled <-> WEB-CLIENT DirectX Files Viewer ActiveX Object Access (web-client.rules)
4180 <-> Disabled <-> WEB-CLIENT Kodak Image Scan ActiveX Object Access (web-client.rules)
4181 <-> Disabled <-> WEB-CLIENT Smartcard Enrollment ActiveX Object Access (web-client.rules)
4182 <-> Disabled <-> WEB-CLIENT MSN Chat v4.5, 4.6 ActiveX Object Access (web-client.rules)
4183 <-> Disabled <-> WEB-CLIENT HTML Help ActiveX Object Access (web-client.rules)
4184 <-> Disabled <-> WEB-CLIENT Certificate Enrollment ActiveX Object Access (web-client.rules)
4185 <-> Disabled <-> WEB-CLIENT Terminal Services Advanced Client ActiveX Object Access (web-client.rules)
4186 <-> Disabled <-> WEB-CLIENT Kodak Image Editing ActiveX Object Access (web-client.rules)
4187 <-> Disabled <-> WEB-CLIENT Terminal Services Advanced Client ActiveX Object Access (web-client.rules)
4188 <-> Disabled <-> WEB-CLIENT RAV Online Scanner ActiveX Object Access (web-client.rules)
4189 <-> Disabled <-> WEB-CLIENT Third-Party Plugin ActiveX Object Access (web-client.rules)
4190 <-> Disabled <-> WEB-CLIENT Kodak Thumbnail Image ActiveX Object Access (web-client.rules)
4191 <-> Disabled <-> WEB-CLIENT MsnPUpld ActiveX Object Access (web-client.rules)
4192 <-> Disabled <-> WEB-CLIENT HHOpen ActiveX Object Access (web-client.rules)
4193 <-> Disabled <-> WEB-CLIENT Kodak Image Editing ActiveX Object Access (web-client.rules)
4197 <-> Disabled <-> WEB-CLIENT DigWebX MSN ActiveX Object Access (web-client.rules)
4198 <-> Disabled <-> WEB-CLIENT Internet Explorer Blnmgrps.dll ActiveX Object Access (web-client.rules)
4199 <-> Disabled <-> WEB-CLIENT Internet Explorer Blnmgrps.dll ActiveX Object Access (web-client.rules)
4200 <-> Disabled <-> WEB-CLIENT Index Server Scope Administration ActiveX Object Access (web-client.rules)
4201 <-> Disabled <-> WEB-CLIENT Queued Components Recorder ActiveX Object Access (web-client.rules)
4202 <-> Disabled <-> WEB-CLIENT DirectAnimation ActiveX Object Access (web-client.rules)
4203 <-> Disabled <-> WEB-CLIENT Microsoft Marquee Control ActiveX Object Access (web-client.rules)
4204 <-> Disabled <-> WEB-CLIENT Microsoft DT PolyLine Control 2 ActiveX Object Access (web-client.rules)
4205 <-> Disabled <-> WEB-CLIENT Microsoft Visual Database Tools Database Designer v7.0 ActiveX Object Access (web-client.rules)
4206 <-> Disabled <-> WEB-CLIENT Microsoft MPEG-4 Video Decompressor Property Page ActiveX Object Access (web-client.rules)
4207 <-> Disabled <-> WEB-CLIENT Microsoft MS Audio Decompressor Control Property Page ActiveX Object Access (web-client.rules)
4208 <-> Disabled <-> WEB-CLIENT LexRefStEsObject Class ActiveX Object Access (web-client.rules)
4209 <-> Disabled <-> WEB-CLIENT LexRefStFrObject Class ActiveX Object Access (web-client.rules)
4210 <-> Disabled <-> WEB-CLIENT Internet Explorer Msb1geen.dll ActiveX Object Access (web-client.rules)
4211 <-> Disabled <-> WEB-CLIENT Microsoft DDS Library Shape Control ActiveX Object Access (web-client.rules)
4212 <-> Disabled <-> WEB-CLIENT Microsoft DDS Generic Class ActiveX Object Access (web-client.rules)
4213 <-> Disabled <-> WEB-CLIENT Microsoft DDS Picture Shape Control ActiveX Object Access (web-client.rules)
4214 <-> Disabled <-> WEB-CLIENT Microsoft TipGW Init ActiveX Object Access (web-client.rules)
4215 <-> Disabled <-> WEB-CLIENT Microsoft HTML Popup Window ActiveX Object Access (web-client.rules)
4216 <-> Disabled <-> WEB-CLIENT CLSID_CComAcctImport ActiveX Object Access (web-client.rules)
4217 <-> Disabled <-> WEB-CLIENT Microsoft Office Services on the Web Free/Busy ActiveX Object Access (web-client.rules)
4218 <-> Disabled <-> WEB-CLIENT Microsoft Visual Basic WebClass ActiveX Object Access (web-client.rules)
4219 <-> Disabled <-> WEB-CLIENT Microsoft Network Connections Tray ActiveX Object Access (web-client.rules)
4220 <-> Disabled <-> WEB-CLIENT Microsoft Network and Dial-Up Connections ActiveX Object Access (web-client.rules)
4221 <-> Disabled <-> WEB-CLIENT Microsoft ProxyStub Dispatch ActiveX Object Access (web-client.rules)
4222 <-> Disabled <-> WEB-CLIENT Internet Explorer Outllib.dll ActiveX Object Access (web-client.rules)
4223 <-> Disabled <-> WEB-CLIENT Microsoft OpenCable Class ActiveX Object Access (web-client.rules)
4224 <-> Disabled <-> WEB-CLIENT Microsoft VideoPort ActiveX Object Access (web-client.rules)
4225 <-> Disabled <-> WEB-CLIENT Microsoft Repository ActiveX Object Access (web-client.rules)
4226 <-> Disabled <-> WEB-CLIENT Microsoft DocHost User Interface Handler ActiveX Object Access (web-client.rules)
4227 <-> Disabled <-> WEB-CLIENT Microsoft Network Connections ActiveX Object Access (web-client.rules)
4228 <-> Disabled <-> WEB-CLIENT Microsoft Windows Start Menu ActiveX Object Access (web-client.rules)
4229 <-> Disabled <-> WEB-CLIENT MSAPP Export Support for Microsoft Access ActiveX Object Access (web-client.rules)
4230 <-> Disabled <-> WEB-CLIENT Search Assistant UI ActiveX Object Access (web-client.rules)
4231 <-> Disabled <-> WEB-CLIENT Microsoft SysTray ActiveX Object Access (web-client.rules)
4232 <-> Disabled <-> WEB-CLIENT Microsoft SysTray Invoker ActiveX Object Access (web-client.rules)
4233 <-> Disabled <-> WEB-CLIENT Microsoft Visual Database Tools Query Designer v7.0 ActiveX Object Access (web-client.rules)
4234 <-> Disabled <-> WEB-CLIENT Microsoft MSVTDGridCtrl7 ActiveX Object Access (web-client.rules)
4235 <-> Disabled <-> WEB-CLIENT Helper Object for Java ActiveX Object Access (web-client.rules)
4236 <-> Disabled <-> WEB-CLIENT WMI ASDI Extension ActiveX Object Access (web-client.rules)
4643 <-> Disabled <-> WEB-CLIENT malformed windows shortcut file buffer overflow attempt (web-client.rules)
4644 <-> Disabled <-> WEB-CLIENT malformed windows shortcut file with comment buffer overflow attempt (web-client.rules)
4648 <-> Disabled <-> WEB-CLIENT wang image admin activex object access (web-client.rules)
4890 <-> Disabled <-> WEB-CLIENT IAVIStream & IAVIFile Proxy ActiveX Object Access (web-client.rules)
4891 <-> Disabled <-> WEB-CLIENT cfw Class ActiveX Object Access (web-client.rules)
4892 <-> Disabled <-> WEB-CLIENT MTSEvents Class ActiveX Object Access (web-client.rules)
4893 <-> Disabled <-> WEB-CLIENT Trident HTMLEditor ActiveX Object Access (web-client.rules)
4894 <-> Disabled <-> WEB-CLIENT PSEnumVariant ActiveX Object Access (web-client.rules)
4895 <-> Disabled <-> WEB-CLIENT PSTypeInfo ActiveX Object Access (web-client.rules)
4896 <-> Disabled <-> WEB-CLIENT PSTypeLib ActiveX Object Access (web-client.rules)
4897 <-> Disabled <-> WEB-CLIENT PSOAInterface ActiveX Object Access (web-client.rules)
4898 <-> Disabled <-> WEB-CLIENT PSTypeComp ActiveX Object Access (web-client.rules)
4899 <-> Disabled <-> WEB-CLIENT ISupportErrorInfo Interface ActiveX Object Access (web-client.rules)
4900 <-> Disabled <-> WEB-CLIENT Outlook Progress Ctl ActiveX Object Access (web-client.rules)
4901 <-> Disabled <-> WEB-CLIENT VMR Allocator Presenter 9 ActiveX Object Access (web-client.rules)
4902 <-> Disabled <-> WEB-CLIENT Video Mixing Renderer 9 ActiveX Object Access (web-client.rules)
4903 <-> Disabled <-> WEB-CLIENT VMR ImageSync 9 ActiveX Object Access (web-client.rules)
4904 <-> Disabled <-> WEB-CLIENT Microsoft Repository Alias ActiveX Object Access (web-client.rules)
4905 <-> Disabled <-> WEB-CLIENT Microsoft Repository Object ActiveX Object Access (web-client.rules)
4906 <-> Disabled <-> WEB-CLIENT Microsoft Repository Interface Definition ActiveX Object Access (web-client.rules)
4907 <-> Disabled <-> WEB-CLIENT Microsoft Repository Collection Definition ActiveX Object Access (web-client.rules)
4908 <-> Disabled <-> WEB-CLIENT Microsoft Repository Method Definition ActiveX Object Access (web-client.rules)
4909 <-> Disabled <-> WEB-CLIENT Microsoft Repository Property Definition ActiveX Object Access (web-client.rules)
4910 <-> Disabled <-> WEB-CLIENT Microsoft Repository Relationship Definition ActiveX Object Access (web-client.rules)
4911 <-> Disabled <-> WEB-CLIENT Microsoft Repository Type Library ActiveX Object Access (web-client.rules)
4912 <-> Disabled <-> WEB-CLIENT Microsoft Repository Root ActiveX Object Access (web-client.rules)
4913 <-> Disabled <-> WEB-CLIENT Microsoft Repository Workspace ActiveX Object Access (web-client.rules)
4914 <-> Disabled <-> WEB-CLIENT Microsoft Repository Script Definition ActiveX Object Access (web-client.rules)
4915 <-> Disabled <-> WEB-CLIENT Shortcut Handler ActiveX Object Access (web-client.rules)
4982 <-> Disabled <-> WEB-CLIENT Adodb.Stream ActiveX Object Access (web-client.rules)
5319 <-> Disabled <-> WEB-CLIENT Metasploit Windows picture and fax viewer wmf arbitrary code execution attempt (web-client.rules)
5710 <-> Disabled <-> WEB-CLIENT Windows Media Player Plugin for Non-IE browsers buffer overflow attempt (web-client.rules)
5711 <-> Disabled <-> WEB-CLIENT Windows Media Player zero length bitmap heap overflow attempt (web-client.rules)
5712 <-> Disabled <-> WEB-CLIENT Windows Media Player invalid data offset bitmap heap overflow attempt (web-client.rules)
5713 <-> Disabled <-> WEB-CLIENT Windows Metafile invalid header size integer overflow (web-client.rules)
5740 <-> Disabled <-> WEB-CLIENT Microsoft HTML help workshop file .hhp download attempt (web-client.rules)
5741 <-> Disabled <-> WEB-CLIENT Microsoft HTML help workshop buffer overflow attempt (web-client.rules)
6002 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS Rectilinear GDD Layout ActiveX Object Access (web-client.rules)
6003 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS Rectilinear GDD Route ActiveX Object Access (web-client.rules)
6004 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS Circular Auto Layout Logic 2 ActiveX Object Access (web-client.rules)
6005 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS Straight Line Routing Logic 2 ActiveX Object Access (web-client.rules)
6006 <-> Disabled <-> WEB-CLIENT Microsoft DT Icon Control ActiveX Object Access (web-client.rules)
6007 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS OrgChart GDD Layout ActiveX Object Access (web-client.rules)
6008 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS OrgChart GDD Route ActiveX Object Access (web-client.rules)
6009 <-> Disabled <-> WEB-CLIENT RDS.Dataspace ActiveX Object Access (web-client.rules)
6504 <-> Disabled <-> WEB-CLIENT Sophos Anti-Virus CAB file overflow attempt (web-client.rules)
6505 <-> Disabled <-> WEB-CLIENT quicktime fpx file SectNumMiniFAT overflow attempt (web-client.rules)
6506 <-> Disabled <-> WEB-CLIENT quicktime udta atom overflow attempt (web-client.rules)
6509 <-> Disabled <-> WEB-CLIENT Internet Explorer mhtml uri href buffer overflow attempt (web-client.rules)
6510 <-> Disabled <-> WEB-CLIENT Internet Explorer mhtml uri shortcut buffer overflow attempt (web-client.rules)
6516 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Light ActiveX function call access (web-client.rules)
6517 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Light ActiveX CLSID access (web-client.rules)
6518 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Light ActiveX CLSID unicode access (web-client.rules)
6680 <-> Disabled <-> WEB-CLIENT Windows Media Transform Effects ActiveX CLSID unicode access (web-client.rules)
6681 <-> Disabled <-> WEB-CLIENT Windows Media Transform Effects ActiveX CLSID access (web-client.rules)
6682 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect2Inputs ActiveX function call access (web-client.rules)
6683 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect1Input ActiveX CLSID unicode access (web-client.rules)
6684 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect1Input ActiveX CLSID access (web-client.rules)
6685 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect2Inputs ActiveX CLSID unicode access (web-client.rules)
6686 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect2Inputs ActiveX CLSID access (web-client.rules)
6687 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect1Input ActiveX function call access (web-client.rules)
7002 <-> Disabled <-> WEB-CLIENT excel url unicode overflow attempt (web-client.rules)
7004 <-> Disabled <-> WEB-CLIENT Internet.HHCtrl.1 ActiveX function call access (web-client.rules)
7006 <-> Disabled <-> WEB-CLIENT ASControls.InstallEngineCtl ActiveX function call access (web-client.rules)
7007 <-> Disabled <-> WEB-CLIENT AxDebugger.Document.1 ActiveX function call access (web-client.rules)
7008 <-> Disabled <-> WEB-CLIENT DirectAnimation.DAUserData ActiveX function call access (web-client.rules)
7009 <-> Disabled <-> WEB-CLIENT DirectAnimation.StructuredGraphicsControl ActiveX function call access (web-client.rules)
7010 <-> Disabled <-> WEB-CLIENT HtmlDlgSafeHelper.HtmlDlgSafeHelper.1 ActiveX function call access (web-client.rules)
7011 <-> Disabled <-> WEB-CLIENT HtmlDlgSafeHelper.HtmlDlgSafeHelper ActiveX function call access (web-client.rules)
7012 <-> Disabled <-> WEB-CLIENT Internet.PopupMenu.1 ActiveX function call access (web-client.rules)
7013 <-> Disabled <-> WEB-CLIENT Microsoft.ISCatAdm ActiveX function call access (web-client.rules)
7014 <-> Disabled <-> WEB-CLIENT NMSA.ASFSourceMediaDescription.1 ActiveX function call access (web-client.rules)
7015 <-> Disabled <-> WEB-CLIENT NMSA.MediaDescription ActiveX function call access (web-client.rules)
7016 <-> Disabled <-> WEB-CLIENT Object.Microsoft.DXTFilter ActiveX function call access (web-client.rules)
7017 <-> Disabled <-> WEB-CLIENT RDS.DataControl ActiveX function call access (web-client.rules)
7018 <-> Disabled <-> WEB-CLIENT Sysmon ActiveX function call access (web-client.rules)
7026 <-> Disabled <-> WEB-CLIENT RDS.Dataspace ActiveX function call access (web-client.rules)
7425 <-> Disabled <-> WEB-CLIENT 9x8Resize ActiveX CLSID access (web-client.rules)
7426 <-> Disabled <-> WEB-CLIENT 9x8Resize ActiveX CLSID unicode access (web-client.rules)
7427 <-> Disabled <-> WEB-CLIENT Allocator Fix ActiveX CLSID access (web-client.rules)
7428 <-> Disabled <-> WEB-CLIENT Allocator Fix ActiveX CLSID unicode access (web-client.rules)
7429 <-> Disabled <-> WEB-CLIENT Bitmap ActiveX CLSID access (web-client.rules)
7430 <-> Disabled <-> WEB-CLIENT Bitmap ActiveX CLSID unicode access (web-client.rules)
7431 <-> Disabled <-> WEB-CLIENT DirectFrame.DirectControl.1 ActiveX CLSID access (web-client.rules)
7432 <-> Disabled <-> WEB-CLIENT DirectFrame.DirectControl.1 ActiveX CLSID unicode access (web-client.rules)
7433 <-> Disabled <-> WEB-CLIENT DirectX Transform Wrapper Property Page ActiveX CLSID access (web-client.rules)
7434 <-> Disabled <-> WEB-CLIENT DirectX Transform Wrapper Property Page ActiveX CLSID unicode access (web-client.rules)
7435 <-> Disabled <-> WEB-CLIENT Dynamic Casts ActiveX CLSID access (web-client.rules)
7436 <-> Disabled <-> WEB-CLIENT Dynamic Casts ActiveX CLSID unicode access (web-client.rules)
7437 <-> Disabled <-> WEB-CLIENT Frame Eater ActiveX CLSID access (web-client.rules)
7438 <-> Disabled <-> WEB-CLIENT Frame Eater ActiveX CLSID unicode access (web-client.rules)
7439 <-> Disabled <-> WEB-CLIENT HTML Help ActiveX CLSID access (web-client.rules)
7440 <-> Disabled <-> WEB-CLIENT HTML Help ActiveX CLSID unicode access (web-client.rules)
7441 <-> Disabled <-> WEB-CLIENT HTML Help ActiveX CLSID unicode access (web-client.rules)
7442 <-> Disabled <-> WEB-CLIENT mmAEPlugIn.AEPlugIn.1 ActiveX CLSID access (web-client.rules)
7443 <-> Disabled <-> WEB-CLIENT mmAEPlugIn.AEPlugIn.1 ActiveX CLSID unicode access (web-client.rules)
7444 <-> Disabled <-> WEB-CLIENT Mmedia.AsyncMHandler.1 ActiveX CLSID access (web-client.rules)
7445 <-> Disabled <-> WEB-CLIENT Mmedia.AsyncMHandler.1 ActiveX CLSID unicode access (web-client.rules)
7446 <-> Disabled <-> WEB-CLIENT Record Queue ActiveX CLSID access (web-client.rules)
7447 <-> Disabled <-> WEB-CLIENT Record Queue ActiveX CLSID unicode access (web-client.rules)
7448 <-> Disabled <-> WEB-CLIENT ShotDetect ActiveX CLSID access (web-client.rules)
7449 <-> Disabled <-> WEB-CLIENT ShotDetect ActiveX CLSID unicode access (web-client.rules)
7450 <-> Disabled <-> WEB-CLIENT Stetch ActiveX CLSID access (web-client.rules)
7451 <-> Disabled <-> WEB-CLIENT Stetch ActiveX CLSID unicode access (web-client.rules)
7452 <-> Disabled <-> WEB-CLIENT WM Color Converter Filter ActiveX CLSID access (web-client.rules)
7453 <-> Disabled <-> WEB-CLIENT WM Color Converter Filter ActiveX CLSID unicode access (web-client.rules)
7454 <-> Disabled <-> WEB-CLIENT Wmm2ae.dll ActiveX CLSID access (web-client.rules)
7455 <-> Disabled <-> WEB-CLIENT Wmm2ae.dll ActiveX CLSID unicode access (web-client.rules)
7456 <-> Disabled <-> WEB-CLIENT Wmm2fxa.dll ActiveX CLSID access (web-client.rules)
7457 <-> Disabled <-> WEB-CLIENT Wmm2fxa.dll ActiveX CLSID unicode access (web-client.rules)
7458 <-> Disabled <-> WEB-CLIENT Wmm2fxb.dll ActiveX CLSID access (web-client.rules)
7459 <-> Disabled <-> WEB-CLIENT Wmm2fxb.dll ActiveX CLSID unicode access (web-client.rules)
7460 <-> Disabled <-> WEB-CLIENT WMT Audio Analyzer ActiveX CLSID access (web-client.rules)
7461 <-> Disabled <-> WEB-CLIENT WMT Audio Analyzer ActiveX CLSID unicode access (web-client.rules)
7462 <-> Disabled <-> WEB-CLIENT WMT Black Frame Generator ActiveX CLSID access (web-client.rules)
7463 <-> Disabled <-> WEB-CLIENT WMT Black Frame Generator ActiveX CLSID unicode access (web-client.rules)
7464 <-> Disabled <-> WEB-CLIENT WMT DeInterlace Filter ActiveX CLSID access (web-client.rules)
7465 <-> Disabled <-> WEB-CLIENT WMT DeInterlace Filter ActiveX CLSID unicode access (web-client.rules)
7466 <-> Disabled <-> WEB-CLIENT WMT DeInterlace Prop Page ActiveX CLSID access (web-client.rules)
7467 <-> Disabled <-> WEB-CLIENT WMT DeInterlace Prop Page ActiveX CLSID unicode access (web-client.rules)
7468 <-> Disabled <-> WEB-CLIENT WMT DirectX Transform Wrapper ActiveX CLSID access (web-client.rules)
7469 <-> Disabled <-> WEB-CLIENT WMT DirectX Transform Wrapper ActiveX CLSID unicode access (web-client.rules)
7470 <-> Disabled <-> WEB-CLIENT WMT DV Extract Filter ActiveX CLSID access (web-client.rules)
7471 <-> Disabled <-> WEB-CLIENT WMT DV Extract Filter ActiveX CLSID unicode access (web-client.rules)
7472 <-> Disabled <-> WEB-CLIENT WMT FormatConversion Prop Page ActiveX CLSID access (web-client.rules)
7473 <-> Disabled <-> WEB-CLIENT WMT FormatConversion Prop Page ActiveX CLSID unicode access (web-client.rules)
7474 <-> Disabled <-> WEB-CLIENT WMT FormatConversion ActiveX CLSID access (web-client.rules)
7475 <-> Disabled <-> WEB-CLIENT WMT FormatConversion ActiveX CLSID unicode access (web-client.rules)
7476 <-> Disabled <-> WEB-CLIENT WMT Import Filter ActiveX CLSID access (web-client.rules)
7477 <-> Disabled <-> WEB-CLIENT WMT Import Filter ActiveX CLSID unicode access (web-client.rules)
7478 <-> Disabled <-> WEB-CLIENT WMT Interlacer ActiveX CLSID access (web-client.rules)
7479 <-> Disabled <-> WEB-CLIENT WMT Interlacer ActiveX CLSID unicode access (web-client.rules)
7480 <-> Disabled <-> WEB-CLIENT WMT Log Filter ActiveX CLSID access (web-client.rules)
7481 <-> Disabled <-> WEB-CLIENT WMT Log Filter ActiveX CLSID unicode access (web-client.rules)
7482 <-> Disabled <-> WEB-CLIENT WMT MuxDeMux Filter ActiveX CLSID access (web-client.rules)
7483 <-> Disabled <-> WEB-CLIENT WMT MuxDeMux Filter ActiveX CLSID unicode access (web-client.rules)
7484 <-> Disabled <-> WEB-CLIENT WMT Sample Info Filter ActiveX CLSID access (web-client.rules)
7485 <-> Disabled <-> WEB-CLIENT WMT Sample Info Filter ActiveX CLSID unicode access (web-client.rules)
7486 <-> Disabled <-> WEB-CLIENT WMT Screen Capture Filter Task Page ActiveX CLSID access (web-client.rules)
7487 <-> Disabled <-> WEB-CLIENT WMT Screen Capture Filter Task Page ActiveX CLSID unicode access (web-client.rules)
7488 <-> Disabled <-> WEB-CLIENT WMT Screen capture Filter ActiveX CLSID access (web-client.rules)
7489 <-> Disabled <-> WEB-CLIENT WMT Screen capture Filter ActiveX CLSID unicode access (web-client.rules)
7490 <-> Disabled <-> WEB-CLIENT WMT Switch Filter ActiveX CLSID access (web-client.rules)
7491 <-> Disabled <-> WEB-CLIENT WMT Switch Filter ActiveX CLSID unicode access (web-client.rules)
7492 <-> Disabled <-> WEB-CLIENT WMT Virtual Renderer ActiveX CLSID access (web-client.rules)
7493 <-> Disabled <-> WEB-CLIENT WMT Virtual Renderer ActiveX CLSID unicode access (web-client.rules)
7494 <-> Disabled <-> WEB-CLIENT WMT Virtual Source ActiveX CLSID access (web-client.rules)
7495 <-> Disabled <-> WEB-CLIENT WMT Virtual Source ActiveX CLSID unicode access (web-client.rules)
7496 <-> Disabled <-> WEB-CLIENT WMT Volume ActiveX CLSID access (web-client.rules)
7497 <-> Disabled <-> WEB-CLIENT WMT Volume ActiveX CLSID unicode access (web-client.rules)
7498 <-> Disabled <-> WEB-CLIENT WM TV Out Smooth Picture Filter ActiveX CLSID access (web-client.rules)
7499 <-> Disabled <-> WEB-CLIENT WM TV Out Smooth Picture Filter ActiveX CLSID unicode access (web-client.rules)
7500 <-> Disabled <-> WEB-CLIENT WM VIH2 Fix ActiveX CLSID access (web-client.rules)
7501 <-> Disabled <-> WEB-CLIENT WM VIH2 Fix ActiveX CLSID unicode access (web-client.rules)
7502 <-> Disabled <-> WEB-CLIENT tsuserex.ADsTSUserEx.1 ActiveX CLSID access (web-client.rules)
7503 <-> Disabled <-> WEB-CLIENT tsuserex.ADsTSUserEx.1 ActiveX CLSID unicode access (web-client.rules)
7862 <-> Disabled <-> WEB-CLIENT McSubMgr.IsAppExpired ActiveX function call access (web-client.rules)
7863 <-> Disabled <-> WEB-CLIENT McSubMgr.IsOldAppInstalled ActiveX function call access (web-client.rules)
7864 <-> Disabled <-> WEB-CLIENT McSubMgr ActiveX CLSID access (web-client.rules)
7865 <-> Disabled <-> WEB-CLIENT McSubMgr ActiveX CLSID unicode access (web-client.rules)
7866 <-> Disabled <-> WEB-CLIENT ADODB.Connection ActiveX CLSID access (web-client.rules)
7867 <-> Disabled <-> WEB-CLIENT ADODB.Connection ActiveX CLSID unicode access (web-client.rules)
7868 <-> Disabled <-> WEB-CLIENT ADODB.Recordset ActiveX CLSID access (web-client.rules)
7869 <-> Disabled <-> WEB-CLIENT ADODB.Recordset ActiveX CLSID unicode access (web-client.rules)
7870 <-> Disabled <-> WEB-CLIENT Microsoft Office Data Source Control 9.0 ActiveX CLSID access (web-client.rules)
7871 <-> Disabled <-> WEB-CLIENT Microsoft Office Data Source Control 9.0 ActiveX CLSID unicode access (web-client.rules)
7872 <-> Disabled <-> WEB-CLIENT Microsoft Office Spreadsheet 10.0 ActiveX CLSID access (web-client.rules)
7873 <-> Disabled <-> WEB-CLIENT Microsoft Office Spreadsheet 10.0 ActiveX CLSID unicode access (web-client.rules)
7874 <-> Disabled <-> WEB-CLIENT Microsoft Office PivotTable 10.0 ActiveX CLSID access (web-client.rules)
7875 <-> Disabled <-> WEB-CLIENT Microsoft Office PivotTable 10.0 ActiveX CLSID unicode access (web-client.rules)
7876 <-> Disabled <-> WEB-CLIENT Microsoft Office Data Source Control 10.0 ActiveX CLSID access (web-client.rules)
7877 <-> Disabled <-> WEB-CLIENT Microsoft Office Data Source Control 10.0 ActiveX CLSID unicode access (web-client.rules)
7878 <-> Disabled <-> WEB-CLIENT AxMetaStream.MetaStreamCtl ActiveX CLSID access (web-client.rules)
7879 <-> Disabled <-> WEB-CLIENT AxMetaStream.MetaStreamCtl ActiveX CLSID unicode access (web-client.rules)
7880 <-> Disabled <-> WEB-CLIENT AxMetaStream.MetaStreamCtlSecondary ActiveX CLSID access (web-client.rules)
7881 <-> Disabled <-> WEB-CLIENT AxMetaStream.MetaStreamCtlSecondary ActiveX CLSID unicode access (web-client.rules)
7882 <-> Disabled <-> WEB-CLIENT AccSync.AccSubNotHandler ActiveX CLSID access (web-client.rules)
7883 <-> Disabled <-> WEB-CLIENT AccSync.AccSubNotHandler ActiveX CLSID unicode access (web-client.rules)
7884 <-> Disabled <-> WEB-CLIENT AolCalSvr.ACCalendarListCtrl ActiveX CLSID access (web-client.rules)
7885 <-> Disabled <-> WEB-CLIENT AolCalSvr.ACCalendarListCtrl ActiveX CLSID unicode access (web-client.rules)
7886 <-> Disabled <-> WEB-CLIENT AolCalSvr.ACDictionary ActiveX CLSID access (web-client.rules)
7887 <-> Disabled <-> WEB-CLIENT AolCalSvr.ACDictionary ActiveX CLSID unicode access (web-client.rules)
7888 <-> Disabled <-> WEB-CLIENT AOLFlash.AOLFlash ActiveX CLSID access (web-client.rules)
7889 <-> Disabled <-> WEB-CLIENT AOLFlash.AOLFlash ActiveX CLSID unicode access (web-client.rules)
7890 <-> Disabled <-> WEB-CLIENT AOL.MemExpWz ActiveX CLSID access (web-client.rules)
7891 <-> Disabled <-> WEB-CLIENT AOL.MemExpWz ActiveX CLSID unicode access (web-client.rules)
7892 <-> Disabled <-> WEB-CLIENT AOL Phobos Class ActiveX CLSID access (web-client.rules)
7893 <-> Disabled <-> WEB-CLIENT AOL Phobos Class ActiveX CLSID unicode access (web-client.rules)
7894 <-> Disabled <-> WEB-CLIENT AOL.PicDownloadCtrl ActiveX CLSID access (web-client.rules)
7895 <-> Disabled <-> WEB-CLIENT AOL.PicDownloadCtrl ActiveX CLSID unicode access (web-client.rules)
7896 <-> Disabled <-> WEB-CLIENT AOL.PicEditCtrl ActiveX CLSID access (web-client.rules)
7897 <-> Disabled <-> WEB-CLIENT AOL.PicEditCtrl ActiveX CLSID unicode access (web-client.rules)
7898 <-> Disabled <-> WEB-CLIENT AOL.PicSsvrCtrl ActiveX CLSID access (web-client.rules)
7899 <-> Disabled <-> WEB-CLIENT AOL.PicSsvrCtrl ActiveX CLSID unicode access (web-client.rules)
7900 <-> Disabled <-> WEB-CLIENT AOL.UPFCtrl ActiveX CLSID access (web-client.rules)
7901 <-> Disabled <-> WEB-CLIENT AOL.UPFCtrl ActiveX CLSID unicode access (web-client.rules)
7902 <-> Disabled <-> WEB-CLIENT CDDBControlAOL.CDDBAOLControl ActiveX CLSID access (web-client.rules)
7903 <-> Disabled <-> WEB-CLIENT CDDBControlAOL.CDDBAOLControl ActiveX CLSID unicode access (web-client.rules)
7904 <-> Disabled <-> WEB-CLIENT CDL Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7905 <-> Disabled <-> WEB-CLIENT CDL Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7906 <-> Disabled <-> WEB-CLIENT CDO.KnowledgeSearchFolder ActiveX CLSID access (web-client.rules)
7907 <-> Disabled <-> WEB-CLIENT CDO.KnowledgeSearchFolder ActiveX CLSID unicode access (web-client.rules)
7908 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Chroma ActiveX CLSID access (web-client.rules)
7909 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Chroma ActiveX CLSID unicode access (web-client.rules)
7910 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.DropShadow ActiveX CLSID access (web-client.rules)
7911 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.DropShadow ActiveX CLSID unicode access (web-client.rules)
7912 <-> Disabled <-> WEB-CLIENT DX3DTransform.Microsoft.Shapes ActiveX CLSID access (web-client.rules)
7913 <-> Disabled <-> WEB-CLIENT DX3DTransform.Microsoft.Shapes ActiveX CLSID unicode access (web-client.rules)
7914 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.NDFXArtEffects ActiveX CLSID access (web-client.rules)
7915 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.NDFXArtEffects ActiveX CLSID unicode access (web-client.rules)
7916 <-> Disabled <-> WEB-CLIENT CLSID_IMimeInternational ActiveX CLSID access (web-client.rules)
7917 <-> Disabled <-> WEB-CLIENT CLSID_IMimeInternational ActiveX CLSID unicode access (web-client.rules)
7918 <-> Disabled <-> WEB-CLIENT CoAxTrackVideo Class ActiveX CLSID access (web-client.rules)
7919 <-> Disabled <-> WEB-CLIENT CoAxTrackVideo Class ActiveX CLSID unicode access (web-client.rules)
7920 <-> Disabled <-> WEB-CLIENT DsPropertyPages.OU ActiveX CLSID access (web-client.rules)
7921 <-> Disabled <-> WEB-CLIENT DsPropertyPages.OU ActiveX CLSID unicode access (web-client.rules)
7922 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.RevealTrans ActiveX CLSID access (web-client.rules)
7923 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.RevealTrans ActiveX CLSID unicode access (web-client.rules)
7924 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Shadow ActiveX CLSID access (web-client.rules)
7925 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Shadow ActiveX CLSID unicode access (web-client.rules)
7926 <-> Disabled <-> WEB-CLIENT DXTFilter ActiveX CLSID access (web-client.rules)
7927 <-> Disabled <-> WEB-CLIENT DXTFilter ActiveX CLSID unicode access (web-client.rules)
7928 <-> Disabled <-> WEB-CLIENT file or local Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7929 <-> Disabled <-> WEB-CLIENT file or local Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7930 <-> Disabled <-> WEB-CLIENT FolderItem2 ActiveX CLSID access (web-client.rules)
7931 <-> Disabled <-> WEB-CLIENT FolderItem2 ActiveX CLSID unicode access (web-client.rules)
7932 <-> Disabled <-> WEB-CLIENT FolderItems3 ActiveX CLSID access (web-client.rules)
7933 <-> Disabled <-> WEB-CLIENT FolderItems3 ActiveX CLSID unicode access (web-client.rules)
7934 <-> Disabled <-> WEB-CLIENT ftp Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7935 <-> Disabled <-> WEB-CLIENT ftp Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7936 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Glow ActiveX CLSID access (web-client.rules)
7937 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Glow ActiveX CLSID unicode access (web-client.rules)
7938 <-> Disabled <-> WEB-CLIENT gopher Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7939 <-> Disabled <-> WEB-CLIENT gopher Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7940 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Gradient ActiveX CLSID access (web-client.rules)
7941 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Gradient ActiveX CLSID unicode access (web-client.rules)
7942 <-> Disabled <-> WEB-CLIENT http Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7943 <-> Disabled <-> WEB-CLIENT http Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7944 <-> Disabled <-> WEB-CLIENT https Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7945 <-> Disabled <-> WEB-CLIENT https Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7946 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MaskFilter ActiveX CLSID access (web-client.rules)
7947 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MaskFilter ActiveX CLSID unicode access (web-client.rules)
7948 <-> Disabled <-> WEB-CLIENT Microsoft Common Browser Architecture ActiveX CLSID access (web-client.rules)
7949 <-> Disabled <-> WEB-CLIENT Microsoft Common Browser Architecture ActiveX CLSID unicode access (web-client.rules)
7950 <-> Disabled <-> WEB-CLIENT Microsoft DirectAnimation Control ActiveX CLSID access (web-client.rules)
7951 <-> Disabled <-> WEB-CLIENT Microsoft DirectAnimation Control ActiveX CLSID unicode access (web-client.rules)
7952 <-> Disabled <-> WEB-CLIENT Microsoft DirectAnimation Windowed Control ActiveX CLSID access (web-client.rules)
7953 <-> Disabled <-> WEB-CLIENT Microsoft DirectAnimation Windowed Control ActiveX CLSID unicode access (web-client.rules)
7954 <-> Disabled <-> WEB-CLIENT Microsoft Forms 2.0 ComboBox ActiveX CLSID access (web-client.rules)
7955 <-> Disabled <-> WEB-CLIENT Microsoft Forms 2.0 ComboBox ActiveX CLSID unicode access (web-client.rules)
7956 <-> Disabled <-> WEB-CLIENT Microsoft Forms 2.0 ListBox ActiveX CLSID access (web-client.rules)
7957 <-> Disabled <-> WEB-CLIENT Microsoft Forms 2.0 ListBox ActiveX CLSID unicode access (web-client.rules)
7958 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7959 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7960 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7961 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7962 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7963 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7964 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7965 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7966 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7967 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7968 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7969 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7970 <-> Disabled <-> WEB-CLIENT PostBootReminder object ActiveX CLSID access (web-client.rules)
7971 <-> Disabled <-> WEB-CLIENT PostBootReminder object ActiveX CLSID unicode access (web-client.rules)
7972 <-> Disabled <-> WEB-CLIENT RealPlayer G2 Control ActiveX CLSID access (web-client.rules)
7973 <-> Disabled <-> WEB-CLIENT RealPlayer G2 Control ActiveX CLSID unicode access (web-client.rules)
7974 <-> Disabled <-> WEB-CLIENT Rendezvous Class ActiveX CLSID access (web-client.rules)
7975 <-> Disabled <-> WEB-CLIENT Rendezvous Class ActiveX CLSID unicode access (web-client.rules)
7976 <-> Disabled <-> WEB-CLIENT ShellFolder for CD Burning ActiveX CLSID access (web-client.rules)
7977 <-> Disabled <-> WEB-CLIENT ShellFolder for CD Burning ActiveX CLSID unicode access (web-client.rules)
7978 <-> Disabled <-> WEB-CLIENT ShockwaveFlash.ShockwaveFlash ActiveX CLSID access (web-client.rules)
7979 <-> Disabled <-> WEB-CLIENT ShockwaveFlash.ShockwaveFlash ActiveX CLSID unicode access (web-client.rules)
7980 <-> Disabled <-> WEB-CLIENT ShockwaveFlash.ShockwaveFlash.9 ActiveX function call access (web-client.rules)
7981 <-> Disabled <-> WEB-CLIENT Snapshot Viewer General Property Page Object ActiveX CLSID access (web-client.rules)
7982 <-> Disabled <-> WEB-CLIENT Snapshot Viewer General Property Page Object ActiveX CLSID unicode access (web-client.rules)
7983 <-> Disabled <-> WEB-CLIENT SuperBuddy Class ActiveX CLSID access (web-client.rules)
7984 <-> Disabled <-> WEB-CLIENT SuperBuddy Class ActiveX CLSID unicode access (web-client.rules)
7987 <-> Disabled <-> WEB-CLIENT WebViewFolderIcon.WebViewFolderIcon.2 ActiveX CLSID access (web-client.rules)
7988 <-> Disabled <-> WEB-CLIENT WebViewFolderIcon.WebViewFolderIcon.2 ActiveX CLSID unicode access (web-client.rules)
7989 <-> Disabled <-> WEB-CLIENT WIA FileSystem USD ActiveX CLSID access (web-client.rules)
7990 <-> Disabled <-> WEB-CLIENT WIA FileSystem USD ActiveX CLSID unicode access (web-client.rules)
7991 <-> Disabled <-> WEB-CLIENT ACM Class Manager ActiveX CLSID access (web-client.rules)
7992 <-> Disabled <-> WEB-CLIENT ACM Class Manager ActiveX CLSID unicode access (web-client.rules)
7993 <-> Disabled <-> WEB-CLIENT clbcatex.dll ActiveX CLSID access (web-client.rules)
7994 <-> Disabled <-> WEB-CLIENT clbcatex.dll ActiveX CLSID unicode access (web-client.rules)
7995 <-> Disabled <-> WEB-CLIENT clbcatq.dll ActiveX CLSID access (web-client.rules)
7996 <-> Disabled <-> WEB-CLIENT clbcatq.dll ActiveX CLSID unicode access (web-client.rules)
7997 <-> Disabled <-> WEB-CLIENT CLSID_ApprenticeICW ActiveX CLSID access (web-client.rules)
7998 <-> Disabled <-> WEB-CLIENT CLSID_ApprenticeICW ActiveX CLSID unicode access (web-client.rules)
7999 <-> Disabled <-> WEB-CLIENT CLSID_CDIDeviceActionConfigPage ActiveX CLSID access (web-client.rules)
8000 <-> Disabled <-> WEB-CLIENT CLSID_CDIDeviceActionConfigPage ActiveX CLSID unicode access (web-client.rules)
8001 <-> Disabled <-> WEB-CLIENT CommunicationManager ActiveX CLSID access (web-client.rules)
8002 <-> Disabled <-> WEB-CLIENT CommunicationManager ActiveX CLSID unicode access (web-client.rules)
8003 <-> Disabled <-> WEB-CLIENT Content.mbcontent.1 ActiveX CLSID access (web-client.rules)
8004 <-> Disabled <-> WEB-CLIENT Content.mbcontent.1 ActiveX CLSID unicode access (web-client.rules)
8005 <-> Disabled <-> WEB-CLIENT DiskManagement.Connection ActiveX CLSID access (web-client.rules)
8006 <-> Disabled <-> WEB-CLIENT DiskManagement.Connection ActiveX CLSID unicode access (web-client.rules)
8007 <-> Disabled <-> WEB-CLIENT Dutch_Dutch Stemmer ActiveX CLSID access (web-client.rules)
8008 <-> Disabled <-> WEB-CLIENT Dutch_Dutch Stemmer ActiveX CLSID unicode access (web-client.rules)
8009 <-> Disabled <-> WEB-CLIENT English_UK Stemmer ActiveX CLSID access (web-client.rules)
8010 <-> Disabled <-> WEB-CLIENT English_UK Stemmer ActiveX CLSID unicode access (web-client.rules)
8011 <-> Disabled <-> WEB-CLIENT English_US Stemmer ActiveX CLSID access (web-client.rules)
8012 <-> Disabled <-> WEB-CLIENT English_US Stemmer ActiveX CLSID unicode access (web-client.rules)
8013 <-> Disabled <-> WEB-CLIENT French_French Stemmer ActiveX CLSID access (web-client.rules)
8014 <-> Disabled <-> WEB-CLIENT French_French Stemmer ActiveX CLSID unicode access (web-client.rules)
8015 <-> Disabled <-> WEB-CLIENT German_German Stemmer ActiveX CLSID access (web-client.rules)
8016 <-> Disabled <-> WEB-CLIENT German_German Stemmer ActiveX CLSID unicode access (web-client.rules)
8017 <-> Disabled <-> WEB-CLIENT ICM Class Manager ActiveX CLSID access (web-client.rules)
8018 <-> Disabled <-> WEB-CLIENT ICM Class Manager ActiveX CLSID unicode access (web-client.rules)
8019 <-> Disabled <-> WEB-CLIENT Internet Explorer Address Bar ActiveX CLSID access (web-client.rules)
8020 <-> Disabled <-> WEB-CLIENT Internet Explorer Address Bar ActiveX CLSID unicode access (web-client.rules)
8021 <-> Disabled <-> WEB-CLIENT ISSimpleCommandCreator.1 ActiveX CLSID access (web-client.rules)
8022 <-> Disabled <-> WEB-CLIENT ISSimpleCommandCreator.1 ActiveX CLSID unicode access (web-client.rules)
8023 <-> Disabled <-> WEB-CLIENT Italian_Italian Stemmer ActiveX CLSID access (web-client.rules)
8024 <-> Disabled <-> WEB-CLIENT Italian_Italian Stemmer ActiveX CLSID unicode access (web-client.rules)
8025 <-> Disabled <-> WEB-CLIENT Microsoft HTML Window Security Proxy ActiveX CLSID access (web-client.rules)
8026 <-> Disabled <-> WEB-CLIENT Microsoft HTML Window Security Proxy ActiveX CLSID unicode access (web-client.rules)
8027 <-> Disabled <-> WEB-CLIENT Microsoft WBEM Event Subsystem ActiveX CLSID access (web-client.rules)
8028 <-> Disabled <-> WEB-CLIENT Microsoft WBEM Event Subsystem ActiveX CLSID unicode access (web-client.rules)
8029 <-> Disabled <-> WEB-CLIENT MidiOut Class Manager ActiveX CLSID access (web-client.rules)
8030 <-> Disabled <-> WEB-CLIENT MidiOut Class Manager ActiveX CLSID unicode access (web-client.rules)
8031 <-> Disabled <-> WEB-CLIENT Mslablti.MarshalableTI.1 ActiveX CLSID access (web-client.rules)
8032 <-> Disabled <-> WEB-CLIENT Mslablti.MarshalableTI.1 ActiveX CLSID unicode access (web-client.rules)
8033 <-> Disabled <-> WEB-CLIENT QC.MessageMover.1 ActiveX CLSID access (web-client.rules)
8034 <-> Disabled <-> WEB-CLIENT QC.MessageMover.1 ActiveX CLSID unicode access (web-client.rules)
8035 <-> Disabled <-> WEB-CLIENT Spanish_Modern Stemmer ActiveX CLSID access (web-client.rules)
8036 <-> Disabled <-> WEB-CLIENT Spanish_Modern Stemmer ActiveX CLSID unicode access (web-client.rules)
8037 <-> Disabled <-> WEB-CLIENT Swedish_Default Stemmer ActiveX CLSID access (web-client.rules)
8038 <-> Disabled <-> WEB-CLIENT Swedish_Default Stemmer ActiveX CLSID unicode access (web-client.rules)
8039 <-> Disabled <-> WEB-CLIENT syncui.dll ActiveX CLSID access (web-client.rules)
8040 <-> Disabled <-> WEB-CLIENT syncui.dll ActiveX CLSID unicode access (web-client.rules)
8041 <-> Disabled <-> WEB-CLIENT VFW Capture Class Manager ActiveX CLSID access (web-client.rules)
8042 <-> Disabled <-> WEB-CLIENT VFW Capture Class Manager ActiveX CLSID unicode access (web-client.rules)
8043 <-> Disabled <-> WEB-CLIENT Video Effect Class Manager 1 Input ActiveX CLSID access (web-client.rules)
8044 <-> Disabled <-> WEB-CLIENT Video Effect Class Manager 1 Input ActiveX CLSID unicode access (web-client.rules)
8045 <-> Disabled <-> WEB-CLIENT Video Effect Class Manager 2 Input ActiveX CLSID access (web-client.rules)
8046 <-> Disabled <-> WEB-CLIENT Video Effect Class Manager 2 Input ActiveX CLSID unicode access (web-client.rules)
8047 <-> Disabled <-> WEB-CLIENT WaveIn Class Manager ActiveX CLSID access (web-client.rules)
8048 <-> Disabled <-> WEB-CLIENT WaveIn Class Manager ActiveX CLSID unicode access (web-client.rules)
8049 <-> Disabled <-> WEB-CLIENT WaveOut and DSound Class Manager ActiveX CLSID access (web-client.rules)
8050 <-> Disabled <-> WEB-CLIENT WaveOut and DSound Class Manager ActiveX CLSID unicode access (web-client.rules)
8051 <-> Disabled <-> WEB-CLIENT WDM Instance Provider ActiveX CLSID access (web-client.rules)
8052 <-> Disabled <-> WEB-CLIENT WDM Instance Provider ActiveX CLSID unicode access (web-client.rules)
8058 <-> Disabled <-> WEB-CLIENT Mozilla javascript navigator object access (web-client.rules)
8061 <-> Disabled <-> WEB-CLIENT ADODB.Stream ActiveX CLSID access (web-client.rules)
8062 <-> Disabled <-> WEB-CLIENT ADODB.Stream ActiveX CLSID unicode access (web-client.rules)
8063 <-> Disabled <-> WEB-CLIENT ADODB.Stream ActiveX function call access (web-client.rules)
8064 <-> Disabled <-> WEB-CLIENT Scriptlet.Typelib ActiveX CLSID access (web-client.rules)
8065 <-> Disabled <-> WEB-CLIENT Scriptlet.Typelib ActiveX CLSID unicode access (web-client.rules)
8066 <-> Disabled <-> WEB-CLIENT Windows Scripting Host Shell ActiveX CLSID access (web-client.rules)
8067 <-> Disabled <-> WEB-CLIENT Windows Scripting Host Shell ActiveX CLSID unicode access (web-client.rules)
8068 <-> Disabled <-> WEB-CLIENT Windows Scripting Host Shell ActiveX function call access (web-client.rules)
8069 <-> Disabled <-> WEB-CLIENT Microsoft Virtual Machine ActiveX CLSID access (web-client.rules)
8070 <-> Disabled <-> WEB-CLIENT Microsoft Virtual Machine ActiveX CLSID unicode access (web-client.rules)
8091 <-> Disabled <-> WEB-CLIENT RealPlayer Realpix file format string overflow attempt (web-client.rules)
8363 <-> Disabled <-> WEB-CLIENT Business Object Factory ActiveX CLSID access (web-client.rules)
8364 <-> Disabled <-> WEB-CLIENT Business Object Factory ActiveX CLSID unicode access (web-client.rules)
8365 <-> Disabled <-> WEB-CLIENT DExplore.AppObj.8.0 ActiveX CLSID access (web-client.rules)
8366 <-> Disabled <-> WEB-CLIENT DExplore.AppObj.8.0 ActiveX CLSID unicode access (web-client.rules)
8367 <-> Disabled <-> WEB-CLIENT Microsoft.DbgClr.DTE.8.0 ActiveX CLSID access (web-client.rules)
8368 <-> Disabled <-> WEB-CLIENT Microsoft.DbgClr.DTE.8.0 ActiveX CLSID unicode access (web-client.rules)
8369 <-> Disabled <-> WEB-CLIENT WMIScriptUtils.WMIObjectBroker2.1 ActiveX CLSID access (web-client.rules)
8370 <-> Disabled <-> WEB-CLIENT WMIScriptUtils.WMIObjectBroker2.1 ActiveX CLSID unicode access (web-client.rules)
8371 <-> Disabled <-> WEB-CLIENT Outlook.Application ActiveX CLSID access (web-client.rules)
8372 <-> Disabled <-> WEB-CLIENT Outlook.Application ActiveX CLSID unicode access (web-client.rules)
8373 <-> Disabled <-> WEB-CLIENT VsmIDE.DTE ActiveX CLSID access (web-client.rules)
8374 <-> Disabled <-> WEB-CLIENT VsmIDE.DTE ActiveX CLSID unicode access (web-client.rules)
8375 <-> Disabled <-> WEB-CLIENT QuickTime Object ActiveX CLSID access (web-client.rules)
8376 <-> Disabled <-> WEB-CLIENT QuickTime Object ActiveX CLSID unicode access (web-client.rules)
8377 <-> Disabled <-> WEB-CLIENT RealPlayer Download Handler ActiveX CLSID access (web-client.rules)
8378 <-> Disabled <-> WEB-CLIENT RealPlayer Download Handler ActiveX CLSID unicode access (web-client.rules)
8379 <-> Disabled <-> WEB-CLIENT Xml2Dex ActiveX CLSID access (web-client.rules)
8380 <-> Disabled <-> WEB-CLIENT Xml2Dex ActiveX CLSID unicode access (web-client.rules)
8381 <-> Disabled <-> WEB-CLIENT RealPlayer SMIL Download Handler ActiveX CLSID access (web-client.rules)
8382 <-> Disabled <-> WEB-CLIENT RealPlayer SMIL Download Handler ActiveX CLSID unicode access (web-client.rules)
8383 <-> Disabled <-> WEB-CLIENT RealPlayer RAM Download Handler ActiveX CLSID access (web-client.rules)
8384 <-> Disabled <-> WEB-CLIENT RealPlayer RAM Download Handler ActiveX CLSID unicode access (web-client.rules)
8385 <-> Disabled <-> WEB-CLIENT RealPlayer Playback Handler ActiveX CLSID access (web-client.rules)
8386 <-> Disabled <-> WEB-CLIENT RealPlayer Playback Handler ActiveX CLSID unicode access (web-client.rules)
8387 <-> Disabled <-> WEB-CLIENT RealPlayer RNX Download Handler ActiveX CLSID access (web-client.rules)
8388 <-> Disabled <-> WEB-CLIENT RealPlayer RNX Download Handler ActiveX CLSID unicode access (web-client.rules)
8389 <-> Disabled <-> WEB-CLIENT RealPlayer RMP Download Handler ActiveX CLSID access (web-client.rules)
8390 <-> Disabled <-> WEB-CLIENT RealPlayer RMP Download Handler ActiveX CLSID unicode access (web-client.rules)
8391 <-> Disabled <-> WEB-CLIENT RFXInstMgr Class ActiveX CLSID access (web-client.rules)
8392 <-> Disabled <-> WEB-CLIENT RFXInstMgr Class ActiveX CLSID unicode access (web-client.rules)
8393 <-> Disabled <-> WEB-CLIENT WebDetectFrm ActiveX CLSID access (web-client.rules)
8394 <-> Disabled <-> WEB-CLIENT WebDetectFrm ActiveX CLSID unicode access (web-client.rules)
8395 <-> Disabled <-> WEB-CLIENT DX3DTransform.Microsoft.CrShatter ActiveX CLSID access (web-client.rules)
8396 <-> Disabled <-> WEB-CLIENT DX3DTransform.Microsoft.CrShatter ActiveX CLSID unicode access (web-client.rules)
8397 <-> Disabled <-> WEB-CLIENT Microsoft Office List 11.0 ActiveX CLSID access (web-client.rules)
8398 <-> Disabled <-> WEB-CLIENT Microsoft Office List 11.0 ActiveX CLSID unicode access (web-client.rules)
8399 <-> Disabled <-> WEB-CLIENT Microsoft.WebCapture ActiveX CLSID access (web-client.rules)
8400 <-> Disabled <-> WEB-CLIENT Microsoft.WebCapture ActiveX CLSID unicode access (web-client.rules)
8401 <-> Disabled <-> WEB-CLIENT Windows Media Services DRM Storage ActiveX CLSID access (web-client.rules)
8402 <-> Disabled <-> WEB-CLIENT Windows Media Services DRM Storage ActiveX CLSID unicode access (web-client.rules)
8403 <-> Disabled <-> WEB-CLIENT XML Schmea Cache 6.0 ActiveX CLSID access (web-client.rules)
8404 <-> Disabled <-> WEB-CLIENT XML Schmea Cache 6.0 ActiveX CLSID unicode access (web-client.rules)
8405 <-> Disabled <-> WEB-CLIENT XML HTTP 6.0 ActiveX CLSID access (web-client.rules)
8406 <-> Disabled <-> WEB-CLIENT XML HTTP 6.0 ActiveX CLSID unicode access (web-client.rules)
8407 <-> Disabled <-> WEB-CLIENT VisualExec Control ActiveX CLSID access (web-client.rules)
8408 <-> Disabled <-> WEB-CLIENT VisualExec Control ActiveX CLSID unicode access (web-client.rules)
8409 <-> Disabled <-> WEB-CLIENT RealPlayer Stream Handler ActiveX CLSID access (web-client.rules)
8410 <-> Disabled <-> WEB-CLIENT RealPlayer Stream Handler ActiveX CLSID unicode access (web-client.rules)
8411 <-> Disabled <-> WEB-CLIENT DocFind Command ActiveX CLSID access (web-client.rules)
8412 <-> Disabled <-> WEB-CLIENT DocFind Command ActiveX CLSID unicode access (web-client.rules)
8416 <-> Disabled <-> WEB-CLIENT VML fill method overflow attempt (web-client.rules)
8417 <-> Disabled <-> WEB-CLIENT TriEditDocument.TriEditDocument ActiveX function call access (web-client.rules)
8418 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.RevealTrans ActiveX function call access (web-client.rules)
8420 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Gradient ActiveX function call access (web-client.rules)
8421 <-> Disabled <-> WEB-CLIENT OWC11.DataSourceControl.11 ActiveX function call access (web-client.rules)
8422 <-> Disabled <-> WEB-CLIENT OVCtl.OVCtl.1 ActiveX function call access (web-client.rules)
8423 <-> Disabled <-> WEB-CLIENT CEnroll.CEnroll.2 ActiveX function call access (web-client.rules)
8424 <-> Disabled <-> WEB-CLIENT Microsoft Forms 2.0 ListBox ActiveX function call access (web-client.rules)
8425 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.NDFXArtEffects ActiveX function call access (web-client.rules)