Sourcefire VRT Update
Date: 2006-10-11
This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack.
The format of the file is:
sid - Message (rule group)
New rules: 8444 <-> Disabled <-> WEB-MISC Trend Micro atxconsole format string server response attempt (web-misc.rules) 8445 <-> Disabled <-> WEB-CLIENT RTF file with embedded object package download attempt (web-client.rules) 8446 <-> Disabled <-> POLICY IPv6 encapsulated in IPv4 activity (policy.rules) 8447 <-> Disabled <-> WEB-CLIENT Open document file transfer attempt (web-client.rules) 8448 <-> Disabled <-> WEB-CLIENT Excel colinfo XF record overflow attempt (web-client.rules) 8449 <-> Enabled <-> NETBIOS SMB Rename invalid buffer type andx attempt (netbios.rules) 8450 <-> Enabled <-> NETBIOS SMB Rename invalid buffer type attempt (netbios.rules) 8451 <-> Enabled <-> NETBIOS SMB Rename invalid buffer type unicode andx attempt (netbios.rules) 8452 <-> Enabled <-> NETBIOS SMB Rename invalid buffer type unicode attempt (netbios.rules) 8453 <-> Enabled <-> NETBIOS SMB-DS Rename invalid buffer type andx attempt (netbios.rules) 8454 <-> Enabled <-> NETBIOS SMB-DS Rename invalid buffer type attempt (netbios.rules) 8455 <-> Enabled <-> NETBIOS SMB-DS Rename invalid buffer type unicode andx attempt (netbios.rules) 8456 <-> Enabled <-> NETBIOS SMB-DS Rename invalid buffer type unicode attempt (netbios.rules) 8457 <-> Enabled <-> NETBIOS-DG SMB Rename invalid buffer type andx attempt (netbios.rules) 8458 <-> Enabled <-> NETBIOS-DG SMB Rename invalid buffer type attempt (netbios.rules) 8459 <-> Enabled <-> NETBIOS-DG SMB Rename invalid buffer type unicode andx attempt (netbios.rules) 8460 <-> Enabled <-> NETBIOS-DG SMB Rename invalid buffer type unicode attempt (netbios.rules) Updated rules: 153 <-> Disabled <-> DELETED BACKDOOR DonaldDick 1.53 Traffic (deleted.rules) 830 <-> Disabled <-> DELETED WEB-CGI NPH-publish access (deleted.rules) 841 <-> Disabled <-> DELETED WEB-CGI pfdisplay.cgi access (deleted.rules) 974 <-> Disabled <-> WEB-IIS Directory transversal attempt (web-iis.rules) 976 <-> Disabled <-> WEB-IIS .bat? access (web-iis.rules) 977 <-> Disabled <-> WEB-IIS .cnf access (web-iis.rules) 980 <-> Disabled <-> WEB-IIS CGImail.exe access (web-iis.rules) 986 <-> Disabled <-> WEB-IIS MSProxy access (web-iis.rules) 991 <-> Disabled <-> WEB-IIS achg.htr access (web-iis.rules) 994 <-> Disabled <-> WEB-IIS /scripts/iisadmin/default.htm access (web-iis.rules) 995 <-> Disabled <-> WEB-IIS ism.dll access (web-iis.rules) 996 <-> Disabled <-> WEB-IIS anot.htr access (web-iis.rules) 1007 <-> Disabled <-> WEB-IIS Form_JScript.asp access (web-iis.rules) 1010 <-> Disabled <-> WEB-IIS encoding access (web-iis.rules) 1029 <-> Disabled <-> WEB-IIS scripts-browse access (web-iis.rules) 1075 <-> Disabled <-> WEB-IIS postinfo.asp access (web-iis.rules) 1076 <-> Disabled <-> WEB-IIS repost.asp access (web-iis.rules) 1242 <-> Disabled <-> WEB-IIS ISAPI .ida access (web-iis.rules) 1380 <-> Disabled <-> WEB-IIS Form_VBScript.asp access (web-iis.rules) 1485 <-> Disabled <-> WEB-IIS mkilog.exe access (web-iis.rules) 1486 <-> Disabled <-> WEB-IIS ctss.idc access (web-iis.rules) 1632 <-> Disabled <-> DELETED CHAT AIM send message (deleted.rules) 1656 <-> Enabled <-> WEB-CGI pfdispaly.cgi access (web-cgi.rules) 1660 <-> Disabled <-> WEB-IIS trace.axd access (web-iis.rules) 1750 <-> Disabled <-> WEB-IIS users.xml access (web-iis.rules) 1753 <-> Disabled <-> WEB-IIS as_web.exe access (web-iis.rules) 1754 <-> Disabled <-> WEB-IIS as_web4.exe access (web-iis.rules) 1772 <-> Disabled <-> WEB-IIS pbserver access (web-iis.rules) 1812 <-> Enabled <-> EXPLOIT gobbles SSH exploit attempt (exploit.rules) 1970 <-> Enabled <-> WEB-IIS MDAC Content-Type overflow attempt (web-iis.rules) 2117 <-> Disabled <-> WEB-IIS Battleaxe Forum login.asp access (web-iis.rules) 2133 <-> Disabled <-> WEB-IIS MS BizTalk server access (web-iis.rules) 2134 <-> Disabled <-> WEB-IIS register.asp access (web-iis.rules) 2249 <-> Disabled <-> WEB-IIS /pcadmin/login.asp access (web-iis.rules) 2251 <-> Disabled <-> DELETED NETBIOS DCERPC Remote Activation bind attempt (deleted.rules) 2321 <-> Disabled <-> WEB-IIS foxweb.exe access (web-iis.rules) 2322 <-> Disabled <-> WEB-IIS foxweb.dll access (web-iis.rules) 2324 <-> Disabled <-> WEB-IIS VP-ASP shopsearch.asp access (web-iis.rules) 2325 <-> Disabled <-> WEB-IIS VP-ASP ShopDisplayProducts.asp access (web-iis.rules) 2326 <-> Disabled <-> WEB-IIS sgdynamo.exe access (web-iis.rules) 2374 <-> Enabled <-> FTP NLST overflow attempt (ftp.rules) 2375 <-> Disabled <-> BACKDOOR DoomJuice/mydoom.a backdoor upload/execute attempt (backdoor.rules) 2571 <-> Disabled <-> WEB-IIS SmarterTools SmarterMail frmGetAttachment.aspx access (web-iis.rules) 2573 <-> Disabled <-> WEB-IIS SmarterTools SmarterMail frmCompose.asp access (web-iis.rules) 2622 <-> Disabled <-> DELETED ORACLE dbms_repcat_utl.drop_an_object buffer overflow attempt (deleted.rules) 2623 <-> Disabled <-> DELETED ORACLE dbms_repcat_sna_utl.create_snapshot_repgroup buffer overflow attempt (deleted.rules) 2631 <-> Disabled <-> DELETED ORACLE dbms_repcat.refresh_mview_repgroup buffer overflow attempt (deleted.rules) 2635 <-> Disabled <-> DELETED ORACLE dbms_offline_snapshot.end_load buffer overflow attempt (deleted.rules) 2647 <-> Disabled <-> DELETED ORACLE dbms_repcat_instantiate.instantiate_online buffer overflow attempt (deleted.rules) 2652 <-> Enabled <-> ORACLE dbms_offline_og.begin_load buffer overflow attempt (oracle.rules) 2676 <-> Disabled <-> DELETED ORACLE dbms_repcat_rgt.drop_site_instantiation buffer overflow attempt (deleted.rules) 2686 <-> Disabled <-> DELETED ORACLE sys.dbms_rectifier_diff.differences buffer overflow attempt (deleted.rules) 2700 <-> Disabled <-> DELETED ORACLE numtoyminterval buffer overflow attempt (deleted.rules) 2710 <-> Disabled <-> DELETED ORACLE dbms_offline_og.begin_load buffer overflow attempt (deleted.rules) 2716 <-> Enabled <-> ORACLE dbms_offline_snapshot.end_load buffer overflow attempt (oracle.rules) 2717 <-> Enabled <-> ORACLE dbms_rectifier_diff.differences buffer overflow attempt (oracle.rules) 2794 <-> Enabled <-> ORACLE dbms_repcat.refresh_mview_repgroup buffer overflow attempt (oracle.rules) 2841 <-> Enabled <-> ORACLE sys.dbms_repcat_sna_utl.create_snapshot_repgroup buffer overflow attempt (oracle.rules) 2849 <-> Enabled <-> ORACLE sys.dbms_repcat_utl.drop_an_object buffer overflow attempt (oracle.rules) 3272 <-> Disabled <-> DELETED BACKDOOR mydoom.a backdoor upload/execute attempt (deleted.rules) 3825 <-> Disabled <-> POLICY AOL Instant Messenger Message Send (policy.rules) 5856 <-> Disabled <-> DELETED SPYWARE-PUT Hijacker funbuddyicons runtime detection - funwebproducts user-agent string (deleted.rules) 5912 <-> Disabled <-> DELETED SPYWARE-PUT Hijacker webcrawler runtime detection (deleted.rules) 6414 <-> Disabled <-> WEB-MISC Novell GroupWise Messenger Accept-Language Header Buffer Overflow attempt (web-misc.rules) 7024 <-> Disabled <-> WEB-CLIENT excel style handling overflow attempt (web-client.rules) 7035 <-> Enabled <-> NETBIOS SMB Trans mailslot heap overflow attempt (netbios.rules) 7036 <-> Enabled <-> NETBIOS SMB Trans unicode mailslot heap overflow attempt (netbios.rules) 7037 <-> Enabled <-> NETBIOS SMB-DS Trans mailslot heap overflow attempt (netbios.rules) 7038 <-> Enabled <-> NETBIOS SMB-DS Trans unicode mailslot heap overflow attempt (netbios.rules) 7039 <-> Enabled <-> NETBIOS-DG SMB Trans mailslot heap overflow attempt (netbios.rules) 7040 <-> Enabled <-> NETBIOS-DG SMB Trans unicode mailslot heap overflow attempt (netbios.rules) 7041 <-> Enabled <-> NETBIOS SMB Trans andx mailslot heap overflow attempt (netbios.rules) 7042 <-> Enabled <-> NETBIOS SMB Trans unicode andx mailslot heap overflow attempt (netbios.rules) 7043 <-> Enabled <-> NETBIOS SMB-DS Trans andx mailslot heap overflow attempt (netbios.rules) 7044 <-> Enabled <-> NETBIOS SMB-DS Trans unicode andx mailslot heap overflow attempt (netbios.rules) 7045 <-> Enabled <-> NETBIOS-DG SMB Trans andx mailslot heap overflow attempt (netbios.rules) 7046 <-> Enabled <-> NETBIOS-DG SMB Trans unicode andx mailslot heap overflow attempt (netbios.rules) 7092 <-> Disabled <-> DELETED BACKDOOR uprising screen control 1.0 runtime detection (deleted.rules) 7093 <-> Disabled <-> DELETED BACKDOOR uprising screen control 1.0 runtime detection - init connectiion (deleted.rules) 7094 <-> Disabled <-> DELETED BACKDOOR uprising screen control 1.0 runtime detection (deleted.rules) 7095 <-> Disabled <-> DELETED BACKDOOR uprising screen control 1.0 runtime detection - begin capture (deleted.rules) 7209 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode little endian overflow attempt (netbios.rules) 7210 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize little endian object call overflow attempt (netbios.rules) 7211 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize little endian overflow attempt (netbios.rules) 7212 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX unicode little endian overflow attempt (netbios.rules) 7213 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX unicode overflow attempt (netbios.rules) 7214 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX overflow attempt (netbios.rules) 7215 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode overflow attempt (netbios.rules) 7216 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX little endian overflow attempt (netbios.rules) 7217 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize unicode overflow attempt (netbios.rules) 7218 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX little endian overflow attempt (netbios.rules) 7219 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode little endian object call overflow attempt (netbios.rules) 7220 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX overflow attempt (netbios.rules) 7221 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode little endian object call overflow attempt (netbios.rules) 7222 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize little endian overflow attempt (netbios.rules) 7223 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode overflow attempt (netbios.rules) 7224 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode little endian overflow attempt (netbios.rules) 7225 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX object call overflow attempt (netbios.rules) 7226 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode object call overflow attempt (netbios.rules) 7227 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize little endian object call overflow attempt (netbios.rules) 7228 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode object call overflow attempt (netbios.rules) 7229 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode object call overflow attempt (netbios.rules) 7230 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX object call overflow attempt (netbios.rules) 7231 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize unicode overflow attempt (netbios.rules) 7232 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize overflow attempt (netbios.rules) 7233 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode overflow attempt (netbios.rules) 7234 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode overflow attempt (netbios.rules) 7235 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize little endian overflow attempt (netbios.rules) 7236 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize overflow attempt (netbios.rules) 7237 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize object call overflow attempt (netbios.rules) 7238 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize little endian overflow attempt (netbios.rules) 7239 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX little endian overflow attempt (netbios.rules) 7240 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode little endian overflow attempt (netbios.rules) 7241 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode little endian overflow attempt (netbios.rules) 7242 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX overflow attempt (netbios.rules) 7243 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX unicode little endian overflow attempt (netbios.rules) 7244 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize overflow attempt (netbios.rules) 7245 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize unicode little endian overflow attempt (netbios.rules) 7246 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize overflow attempt (netbios.rules) 7247 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX overflow attempt (netbios.rules) 7248 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize object call overflow attempt (netbios.rules) 7249 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX little endian object call overflow attempt (netbios.rules) 7250 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX little endian overflow attempt (netbios.rules) 7251 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode little endian object call overflow attempt (netbios.rules) 7252 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX little endian object call overflow attempt (netbios.rules) 7253 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode object call overflow attempt (netbios.rules) 7254 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX unicode overflow attempt (netbios.rules) 7255 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize unicode little endian overflow attempt (netbios.rules) 7256 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode little endian object call overflow attempt (netbios.rules) 7257 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode little endian andx overflow attempt (netbios.rules) 7258 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize little endian andx object call overflow attempt (netbios.rules) 7259 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize little endian andx overflow attempt (netbios.rules) 7260 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX unicode little endian andx overflow attempt (netbios.rules) 7261 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX unicode andx overflow attempt (netbios.rules) 7262 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX andx overflow attempt (netbios.rules) 7263 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode andx overflow attempt (netbios.rules) 7264 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX little endian andx overflow attempt (netbios.rules) 7265 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize unicode andx overflow attempt (netbios.rules) 7266 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX little endian andx overflow attempt (netbios.rules) 7267 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode little endian andx object call overflow attempt (netbios.rules) 7268 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX andx overflow attempt (netbios.rules) 7269 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode little endian andx object call overflow attempt (netbios.rules) 7270 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize little endian andx overflow attempt (netbios.rules) 7271 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode andx overflow attempt (netbios.rules) 7272 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode little endian andx overflow attempt (netbios.rules) 7273 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX andx object call overflow attempt (netbios.rules) 7274 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode andx object call overflow attempt (netbios.rules) 7275 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize little endian andx object call overflow attempt (netbios.rules) 7276 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode andx object call overflow attempt (netbios.rules) 7277 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode andx object call overflow attempt (netbios.rules) 7278 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX andx object call overflow attempt (netbios.rules) 7279 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize unicode andx overflow attempt (netbios.rules) 7280 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize andx overflow attempt (netbios.rules) 7281 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode andx overflow attempt (netbios.rules) 7282 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode andx overflow attempt (netbios.rules) 7283 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize little endian andx overflow attempt (netbios.rules) 7284 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize andx overflow attempt (netbios.rules) 7285 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize andx object call overflow attempt (netbios.rules) 7286 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize little endian andx overflow attempt (netbios.rules) 7287 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX little endian andx overflow attempt (netbios.rules) 7288 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode little endian andx overflow attempt (netbios.rules) 7289 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX unicode little endian andx overflow attempt (netbios.rules) 7290 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX andx overflow attempt (netbios.rules) 7291 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize WriteAndX unicode little endian andx overflow attempt (netbios.rules) 7292 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize andx overflow attempt (netbios.rules) 7293 <-> Enabled <-> NETBIOS SMB-DS v4 srvsvc NetrPathCanonicalize unicode little endian andx overflow attempt (netbios.rules) 7294 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize andx overflow attempt (netbios.rules) 7295 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX andx overflow attempt (netbios.rules) 7296 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize andx object call overflow attempt (netbios.rules) 7297 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize WriteAndX little endian andx object call overflow attempt (netbios.rules) 7298 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX little endian andx overflow attempt (netbios.rules) 7299 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize unicode little endian andx object call overflow attempt (netbios.rules) 7300 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX little endian andx object call overflow attempt (netbios.rules) 7301 <-> Enabled <-> NETBIOS SMB-DS srvsvc NetrPathCanonicalize WriteAndX unicode andx object call overflow attempt (netbios.rules) 7302 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize WriteAndX unicode andx overflow attempt (netbios.rules) 7303 <-> Enabled <-> NETBIOS SMB v4 srvsvc NetrPathCanonicalize unicode little endian andx overflow attempt (netbios.rules) 7304 <-> Enabled <-> NETBIOS SMB srvsvc NetrPathCanonicalize unicode little endian andx object call overflow attempt (netbios.rules) 7664 <-> Disabled <-> BACKDOOR screen control 1.0 runtime detection - flowbit set (backdoor.rules) 7665 <-> Disabled <-> BACKDOOR screen control 1.0 runtime detection - initial connection (backdoor.rules) 7667 <-> Disabled <-> BACKDOOR screen control 1.0 runtime detection - capture on port 2208 (backdoor.rules) 7985 <-> Disabled <-> WEB-CLIENT WebViewFolderIcon.WebViewFolderIcon.1 ActiveX CLSID access (web-client.rules) 7986 <-> Disabled <-> WEB-CLIENT WebViewFolderIcon.WebViewFolderIcon.1 ActiveX CLSID unicode access (web-client.rules) 8053 <-> Disabled <-> WEB-CLIENT DirectAnimation.PathControl ActiveX CLSID access (web-client.rules) 8054 <-> Disabled <-> WEB-CLIENT DirectAnimation.PathControl ActiveX CLSID unicode access (web-client.rules) 8055 <-> Disabled <-> WEB-CLIENT DirectAnimation.PathControl ActiveX function call access (web-client.rules) 8419 <-> Disabled <-> WEB-CLIENT WebViewFolderIcon.WebViewFolderIcon.1 ActiveX function call access (web-client.rules) 8443 <-> Disabled <-> WEB-CLIENT Mozilla regular expression heap corruption attempt (web-client.rules) State change rules: 1233 <-> Disabled <-> WEB-CLIENT Outlook EML access (web-client.rules) 1284 <-> Disabled <-> WEB-CLIENT readme.eml download attempt (web-client.rules) 1290 <-> Disabled <-> WEB-CLIENT readme.eml autoload attempt (web-client.rules) 1735 <-> Disabled <-> WEB-CLIENT XMLHttpRequest attempt (web-client.rules) 1840 <-> Disabled <-> WEB-CLIENT Javascript document.domain attempt (web-client.rules) 2435 <-> Disabled <-> WEB-CLIENT Microsoft emf metafile access (web-client.rules) 2436 <-> Disabled <-> WEB-CLIENT Microsoft wmf metafile access (web-client.rules) 2437 <-> Disabled <-> WEB-CLIENT RealPlayer arbitrary javascript command attempt (web-client.rules) 2438 <-> Disabled <-> WEB-CLIENT RealPlayer playlist file URL overflow attempt (web-client.rules) 2439 <-> Disabled <-> WEB-CLIENT RealPlayer playlist http URL overflow attempt (web-client.rules) 2440 <-> Disabled <-> WEB-CLIENT RealPlayer playlist rtsp URL overflow attempt (web-client.rules) 2485 <-> Disabled <-> WEB-CLIENT Norton antivirus sysmspam.dll load attempt (web-client.rules) 2577 <-> Disabled <-> WEB-CLIENT local resource redirection attempt (web-client.rules) 2589 <-> Disabled <-> WEB-CLIENT Content-Disposition CLSID command attempt (web-client.rules) 2671 <-> Disabled <-> WEB-CLIENT bitmap BitmapOffset integer overflow attempt (web-client.rules) 2673 <-> Disabled <-> WEB-CLIENT libpng tRNS overflow attempt (web-client.rules) 3079 <-> Disabled <-> WEB-CLIENT Microsoft ANI file parsing overflow (web-client.rules) 3088 <-> Disabled <-> WEB-CLIENT winamp .cda file name overflow attempt (web-client.rules) 3132 <-> Disabled <-> WEB-CLIENT PNG large image width download attempt (web-client.rules) 3133 <-> Disabled <-> WEB-CLIENT PNG large image height download attempt (web-client.rules) 3134 <-> Disabled <-> WEB-CLIENT PNG large colour depth download attempt (web-client.rules) 3148 <-> Disabled <-> WEB-CLIENT winhelp clsid attempt (web-client.rules) 3149 <-> Disabled <-> WEB-CLIENT object type overflow attempt (web-client.rules) 3192 <-> Disabled <-> WEB-CLIENT Windows Media Player directory traversal via Content-Disposition attempt (web-client.rules) 3470 <-> Disabled <-> WEB-CLIENT RealPlayer VIDORV30 header length buffer overflow (web-client.rules) 3471 <-> Disabled <-> WEB-CLIENT iTunes playlist URL overflow attempt (web-client.rules) 3473 <-> Disabled <-> WEB-CLIENT RealPlayer SMIL file overflow attempt (web-client.rules) 3550 <-> Disabled <-> WEB-CLIENT HTML http scheme hostname overflow attempt (web-client.rules) 3551 <-> Disabled <-> WEB-CLIENT .hta download attempt (web-client.rules) 3552 <-> Disabled <-> WEB-CLIENT OLE32 MSHTA masquerade attempt (web-client.rules) 3553 <-> Disabled <-> WEB-CLIENT HTML DOM null element insertion attempt (web-client.rules) 3632 <-> Disabled <-> WEB-CLIENT Mozilla bitmap width integer overflow attempt (web-client.rules) 3633 <-> Disabled <-> WEB-CLIENT bitmap transfer (web-client.rules) 3634 <-> Disabled <-> WEB-CLIENT Mozilla bitmap width integer overflow multipacket attempt (web-client.rules) 3683 <-> Disabled <-> WEB-CLIENT spoofed MIME-Type auto-execution attempt (web-client.rules) 3684 <-> Disabled <-> WEB-CLIENT Bitmap Transfer (web-client.rules) 3685 <-> Disabled <-> WEB-CLIENT bitmap BitmapOffset multipacket integer overflow attempt (web-client.rules) 3686 <-> Disabled <-> WEB-CLIENT Internet Explorer Content Advisor attempted overflow (web-client.rules) 3689 <-> Disabled <-> WEB-CLIENT Internet Explorer tRNS overflow attempt (web-client.rules) 3814 <-> Disabled <-> WEB-CLIENT IE javaprxy.dll COM access (web-client.rules) 3819 <-> Disabled <-> WEB-CLIENT multipacket CHM file transfer start (web-client.rules) 3820 <-> Disabled <-> WEB-CLIENT multipacket CHM file transfer attempt (web-client.rules) 3821 <-> Disabled <-> WEB-CLIENT CHM file transfer attempt (web-client.rules) 4132 <-> Disabled <-> WEB-CLIENT msdds clsid attempt (web-client.rules) 4133 <-> Disabled <-> WEB-CLIENT devenum clsid attempt (web-client.rules) 4134 <-> Disabled <-> WEB-CLIENT blnmgr clsid attempt (web-client.rules) 4135 <-> Disabled <-> WEB-CLIENT IE JPEG heap overflow single packet attempt (web-client.rules) 4145 <-> Disabled <-> WEB-CLIENT Windows Trouble Shooter ActiveX Object Access (web-client.rules) 4146 <-> Disabled <-> WEB-CLIENT Share Point Portal Services Log Sink ActiveX Object Access (web-client.rules) 4147 <-> Disabled <-> WEB-CLIENT ActiveLabel ActiveX Object Access (web-client.rules) 4150 <-> Disabled <-> WEB-CLIENT Outlook View ActiveX Object Access (web-client.rules) 4151 <-> Disabled <-> WEB-CLIENT System Monitor Source Properties ActiveX Object Access (web-client.rules) 4152 <-> Disabled <-> WEB-CLIENT Windows Media Player 6.4 ActiveX Object Access (web-client.rules) 4153 <-> Disabled <-> WEB-CLIENT Eyedog ActiveX Object Access (web-client.rules) 4154 <-> Disabled <-> WEB-CLIENT Active Setup ActiveX Object Access (web-client.rules) 4155 <-> Disabled <-> WEB-CLIENT htmlfile ActiveX Object Access (web-client.rules) 4156 <-> Disabled <-> WEB-CLIENT Windows Media Player 7+ ActiveX Object Access (web-client.rules) 4157 <-> Disabled <-> WEB-CLIENT MSN Setup BBS 4.71.0.10 ActiveX Object Access (web-client.rules) 4158 <-> Disabled <-> WEB-CLIENT Windows Media Player Active Movie ActiveX Object Access (web-client.rules) 4159 <-> Disabled <-> WEB-CLIENT Multimedia File Property Sheet ActiveX Object Access (web-client.rules) 4160 <-> Disabled <-> WEB-CLIENT Microsoft Windows Reporting Tool ActiveX Object Access (web-client.rules) 4161 <-> Disabled <-> WEB-CLIENT DigWebX MSN ActiveX Object Access (web-client.rules) 4162 <-> Disabled <-> WEB-CLIENT DigWebX MSN ActiveX Object Access (web-client.rules) 4163 <-> Disabled <-> WEB-CLIENT DigWebX MSN ActiveX Object Access (web-client.rules) 4164 <-> Disabled <-> WEB-CLIENT DigWebX MSN ActiveX Object Access (web-client.rules) 4165 <-> Disabled <-> WEB-CLIENT Image Control 1.0 ActiveX Object Access (web-client.rules) 4166 <-> Disabled <-> WEB-CLIENT Shell.Explorer ActiveX Object Access (web-client.rules) 4167 <-> Disabled <-> WEB-CLIENT MSN Heartbeat ActiveX Object Access (web-client.rules) 4168 <-> Disabled <-> WEB-CLIENT Shell Automation Service ActiveX Object Access (web-client.rules) 4169 <-> Disabled <-> WEB-CLIENT Internet Explorer Active Setup ActiveX Object Access (web-client.rules) 4170 <-> Disabled <-> WEB-CLIENT Office 2000/2002 Web Components Data Source Control ActiveX Object Access (web-client.rules) 4171 <-> Disabled <-> WEB-CLIENT Registration Wizard ActiveX Object Access (web-client.rules) 4172 <-> Disabled <-> WEB-CLIENT Microsoft Agent v1.5 ActiveX Object Access (web-client.rules) 4173 <-> Disabled <-> WEB-CLIENT MsnPUpld ActiveX Object Access (web-client.rules) 4174 <-> Disabled <-> WEB-CLIENT Symantec RuFSI registry Information Class ActiveX Object Access (web-client.rules) 4175 <-> Disabled <-> WEB-CLIENT Office 2000/2002 Web Components PivotTable ActiveX Object Access (web-client.rules) 4176 <-> Disabled <-> WEB-CLIENT Office 2000 and 2002 Web Components Chart ActiveX Object Access (web-client.rules) 4177 <-> Disabled <-> WEB-CLIENT Office 2000 and 2002 Web Components Spreadsheet ActiveX Object Access (web-client.rules) 4178 <-> Disabled <-> WEB-CLIENT Office 2000 and 2002 Web Components Record Navigation Control ActiveX Object Access (web-client.rules) 4179 <-> Disabled <-> WEB-CLIENT DirectX Files Viewer ActiveX Object Access (web-client.rules) 4180 <-> Disabled <-> WEB-CLIENT Kodak Image Scan ActiveX Object Access (web-client.rules) 4181 <-> Disabled <-> WEB-CLIENT Smartcard Enrollment ActiveX Object Access (web-client.rules) 4182 <-> Disabled <-> WEB-CLIENT MSN Chat v4.5, 4.6 ActiveX Object Access (web-client.rules) 4183 <-> Disabled <-> WEB-CLIENT HTML Help ActiveX Object Access (web-client.rules) 4184 <-> Disabled <-> WEB-CLIENT Certificate Enrollment ActiveX Object Access (web-client.rules) 4185 <-> Disabled <-> WEB-CLIENT Terminal Services Advanced Client ActiveX Object Access (web-client.rules) 4186 <-> Disabled <-> WEB-CLIENT Kodak Image Editing ActiveX Object Access (web-client.rules) 4187 <-> Disabled <-> WEB-CLIENT Terminal Services Advanced Client ActiveX Object Access (web-client.rules) 4188 <-> Disabled <-> WEB-CLIENT RAV Online Scanner ActiveX Object Access (web-client.rules) 4189 <-> Disabled <-> WEB-CLIENT Third-Party Plugin ActiveX Object Access (web-client.rules) 4190 <-> Disabled <-> WEB-CLIENT Kodak Thumbnail Image ActiveX Object Access (web-client.rules) 4191 <-> Disabled <-> WEB-CLIENT MsnPUpld ActiveX Object Access (web-client.rules) 4192 <-> Disabled <-> WEB-CLIENT HHOpen ActiveX Object Access (web-client.rules) 4193 <-> Disabled <-> WEB-CLIENT Kodak Image Editing ActiveX Object Access (web-client.rules) 4197 <-> Disabled <-> WEB-CLIENT DigWebX MSN ActiveX Object Access (web-client.rules) 4198 <-> Disabled <-> WEB-CLIENT Internet Explorer Blnmgrps.dll ActiveX Object Access (web-client.rules) 4199 <-> Disabled <-> WEB-CLIENT Internet Explorer Blnmgrps.dll ActiveX Object Access (web-client.rules) 4200 <-> Disabled <-> WEB-CLIENT Index Server Scope Administration ActiveX Object Access (web-client.rules) 4201 <-> Disabled <-> WEB-CLIENT Queued Components Recorder ActiveX Object Access (web-client.rules) 4202 <-> Disabled <-> WEB-CLIENT DirectAnimation ActiveX Object Access (web-client.rules) 4203 <-> Disabled <-> WEB-CLIENT Microsoft Marquee Control ActiveX Object Access (web-client.rules) 4204 <-> Disabled <-> WEB-CLIENT Microsoft DT PolyLine Control 2 ActiveX Object Access (web-client.rules) 4205 <-> Disabled <-> WEB-CLIENT Microsoft Visual Database Tools Database Designer v7.0 ActiveX Object Access (web-client.rules) 4206 <-> Disabled <-> WEB-CLIENT Microsoft MPEG-4 Video Decompressor Property Page ActiveX Object Access (web-client.rules) 4207 <-> Disabled <-> WEB-CLIENT Microsoft MS Audio Decompressor Control Property Page ActiveX Object Access (web-client.rules) 4208 <-> Disabled <-> WEB-CLIENT LexRefStEsObject Class ActiveX Object Access (web-client.rules) 4209 <-> Disabled <-> WEB-CLIENT LexRefStFrObject Class ActiveX Object Access (web-client.rules) 4210 <-> Disabled <-> WEB-CLIENT Internet Explorer Msb1geen.dll ActiveX Object Access (web-client.rules) 4211 <-> Disabled <-> WEB-CLIENT Microsoft DDS Library Shape Control ActiveX Object Access (web-client.rules) 4212 <-> Disabled <-> WEB-CLIENT Microsoft DDS Generic Class ActiveX Object Access (web-client.rules) 4213 <-> Disabled <-> WEB-CLIENT Microsoft DDS Picture Shape Control ActiveX Object Access (web-client.rules) 4214 <-> Disabled <-> WEB-CLIENT Microsoft TipGW Init ActiveX Object Access (web-client.rules) 4215 <-> Disabled <-> WEB-CLIENT Microsoft HTML Popup Window ActiveX Object Access (web-client.rules) 4216 <-> Disabled <-> WEB-CLIENT CLSID_CComAcctImport ActiveX Object Access (web-client.rules) 4217 <-> Disabled <-> WEB-CLIENT Microsoft Office Services on the Web Free/Busy ActiveX Object Access (web-client.rules) 4218 <-> Disabled <-> WEB-CLIENT Microsoft Visual Basic WebClass ActiveX Object Access (web-client.rules) 4219 <-> Disabled <-> WEB-CLIENT Microsoft Network Connections Tray ActiveX Object Access (web-client.rules) 4220 <-> Disabled <-> WEB-CLIENT Microsoft Network and Dial-Up Connections ActiveX Object Access (web-client.rules) 4221 <-> Disabled <-> WEB-CLIENT Microsoft ProxyStub Dispatch ActiveX Object Access (web-client.rules) 4222 <-> Disabled <-> WEB-CLIENT Internet Explorer Outllib.dll ActiveX Object Access (web-client.rules) 4223 <-> Disabled <-> WEB-CLIENT Microsoft OpenCable Class ActiveX Object Access (web-client.rules) 4224 <-> Disabled <-> WEB-CLIENT Microsoft VideoPort ActiveX Object Access (web-client.rules) 4225 <-> Disabled <-> WEB-CLIENT Microsoft Repository ActiveX Object Access (web-client.rules) 4226 <-> Disabled <-> WEB-CLIENT Microsoft DocHost User Interface Handler ActiveX Object Access (web-client.rules) 4227 <-> Disabled <-> WEB-CLIENT Microsoft Network Connections ActiveX Object Access (web-client.rules) 4228 <-> Disabled <-> WEB-CLIENT Microsoft Windows Start Menu ActiveX Object Access (web-client.rules) 4229 <-> Disabled <-> WEB-CLIENT MSAPP Export Support for Microsoft Access ActiveX Object Access (web-client.rules) 4230 <-> Disabled <-> WEB-CLIENT Search Assistant UI ActiveX Object Access (web-client.rules) 4231 <-> Disabled <-> WEB-CLIENT Microsoft SysTray ActiveX Object Access (web-client.rules) 4232 <-> Disabled <-> WEB-CLIENT Microsoft SysTray Invoker ActiveX Object Access (web-client.rules) 4233 <-> Disabled <-> WEB-CLIENT Microsoft Visual Database Tools Query Designer v7.0 ActiveX Object Access (web-client.rules) 4234 <-> Disabled <-> WEB-CLIENT Microsoft MSVTDGridCtrl7 ActiveX Object Access (web-client.rules) 4235 <-> Disabled <-> WEB-CLIENT Helper Object for Java ActiveX Object Access (web-client.rules) 4236 <-> Disabled <-> WEB-CLIENT WMI ASDI Extension ActiveX Object Access (web-client.rules) 4643 <-> Disabled <-> WEB-CLIENT malformed windows shortcut file buffer overflow attempt (web-client.rules) 4644 <-> Disabled <-> WEB-CLIENT malformed windows shortcut file with comment buffer overflow attempt (web-client.rules) 4648 <-> Disabled <-> WEB-CLIENT wang image admin activex object access (web-client.rules) 4890 <-> Disabled <-> WEB-CLIENT IAVIStream & IAVIFile Proxy ActiveX Object Access (web-client.rules) 4891 <-> Disabled <-> WEB-CLIENT cfw Class ActiveX Object Access (web-client.rules) 4892 <-> Disabled <-> WEB-CLIENT MTSEvents Class ActiveX Object Access (web-client.rules) 4893 <-> Disabled <-> WEB-CLIENT Trident HTMLEditor ActiveX Object Access (web-client.rules) 4894 <-> Disabled <-> WEB-CLIENT PSEnumVariant ActiveX Object Access (web-client.rules) 4895 <-> Disabled <-> WEB-CLIENT PSTypeInfo ActiveX Object Access (web-client.rules) 4896 <-> Disabled <-> WEB-CLIENT PSTypeLib ActiveX Object Access (web-client.rules) 4897 <-> Disabled <-> WEB-CLIENT PSOAInterface ActiveX Object Access (web-client.rules) 4898 <-> Disabled <-> WEB-CLIENT PSTypeComp ActiveX Object Access (web-client.rules) 4899 <-> Disabled <-> WEB-CLIENT ISupportErrorInfo Interface ActiveX Object Access (web-client.rules) 4900 <-> Disabled <-> WEB-CLIENT Outlook Progress Ctl ActiveX Object Access (web-client.rules) 4901 <-> Disabled <-> WEB-CLIENT VMR Allocator Presenter 9 ActiveX Object Access (web-client.rules) 4902 <-> Disabled <-> WEB-CLIENT Video Mixing Renderer 9 ActiveX Object Access (web-client.rules) 4903 <-> Disabled <-> WEB-CLIENT VMR ImageSync 9 ActiveX Object Access (web-client.rules) 4904 <-> Disabled <-> WEB-CLIENT Microsoft Repository Alias ActiveX Object Access (web-client.rules) 4905 <-> Disabled <-> WEB-CLIENT Microsoft Repository Object ActiveX Object Access (web-client.rules) 4906 <-> Disabled <-> WEB-CLIENT Microsoft Repository Interface Definition ActiveX Object Access (web-client.rules) 4907 <-> Disabled <-> WEB-CLIENT Microsoft Repository Collection Definition ActiveX Object Access (web-client.rules) 4908 <-> Disabled <-> WEB-CLIENT Microsoft Repository Method Definition ActiveX Object Access (web-client.rules) 4909 <-> Disabled <-> WEB-CLIENT Microsoft Repository Property Definition ActiveX Object Access (web-client.rules) 4910 <-> Disabled <-> WEB-CLIENT Microsoft Repository Relationship Definition ActiveX Object Access (web-client.rules) 4911 <-> Disabled <-> WEB-CLIENT Microsoft Repository Type Library ActiveX Object Access (web-client.rules) 4912 <-> Disabled <-> WEB-CLIENT Microsoft Repository Root ActiveX Object Access (web-client.rules) 4913 <-> Disabled <-> WEB-CLIENT Microsoft Repository Workspace ActiveX Object Access (web-client.rules) 4914 <-> Disabled <-> WEB-CLIENT Microsoft Repository Script Definition ActiveX Object Access (web-client.rules) 4915 <-> Disabled <-> WEB-CLIENT Shortcut Handler ActiveX Object Access (web-client.rules) 4982 <-> Disabled <-> WEB-CLIENT Adodb.Stream ActiveX Object Access (web-client.rules) 5319 <-> Disabled <-> WEB-CLIENT Metasploit Windows picture and fax viewer wmf arbitrary code execution attempt (web-client.rules) 5710 <-> Disabled <-> WEB-CLIENT Windows Media Player Plugin for Non-IE browsers buffer overflow attempt (web-client.rules) 5711 <-> Disabled <-> WEB-CLIENT Windows Media Player zero length bitmap heap overflow attempt (web-client.rules) 5712 <-> Disabled <-> WEB-CLIENT Windows Media Player invalid data offset bitmap heap overflow attempt (web-client.rules) 5713 <-> Disabled <-> WEB-CLIENT Windows Metafile invalid header size integer overflow (web-client.rules) 5740 <-> Disabled <-> WEB-CLIENT Microsoft HTML help workshop file .hhp download attempt (web-client.rules) 5741 <-> Disabled <-> WEB-CLIENT Microsoft HTML help workshop buffer overflow attempt (web-client.rules) 6002 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS Rectilinear GDD Layout ActiveX Object Access (web-client.rules) 6003 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS Rectilinear GDD Route ActiveX Object Access (web-client.rules) 6004 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS Circular Auto Layout Logic 2 ActiveX Object Access (web-client.rules) 6005 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS Straight Line Routing Logic 2 ActiveX Object Access (web-client.rules) 6006 <-> Disabled <-> WEB-CLIENT Microsoft DT Icon Control ActiveX Object Access (web-client.rules) 6007 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS OrgChart GDD Layout ActiveX Object Access (web-client.rules) 6008 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS OrgChart GDD Route ActiveX Object Access (web-client.rules) 6009 <-> Disabled <-> WEB-CLIENT RDS.Dataspace ActiveX Object Access (web-client.rules) 6504 <-> Disabled <-> WEB-CLIENT Sophos Anti-Virus CAB file overflow attempt (web-client.rules) 6505 <-> Disabled <-> WEB-CLIENT quicktime fpx file SectNumMiniFAT overflow attempt (web-client.rules) 6506 <-> Disabled <-> WEB-CLIENT quicktime udta atom overflow attempt (web-client.rules) 6509 <-> Disabled <-> WEB-CLIENT Internet Explorer mhtml uri href buffer overflow attempt (web-client.rules) 6510 <-> Disabled <-> WEB-CLIENT Internet Explorer mhtml uri shortcut buffer overflow attempt (web-client.rules) 6516 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Light ActiveX function call access (web-client.rules) 6517 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Light ActiveX CLSID access (web-client.rules) 6518 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Light ActiveX CLSID unicode access (web-client.rules) 6680 <-> Disabled <-> WEB-CLIENT Windows Media Transform Effects ActiveX CLSID unicode access (web-client.rules) 6681 <-> Disabled <-> WEB-CLIENT Windows Media Transform Effects ActiveX CLSID access (web-client.rules) 6682 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect2Inputs ActiveX function call access (web-client.rules) 6683 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect1Input ActiveX CLSID unicode access (web-client.rules) 6684 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect1Input ActiveX CLSID access (web-client.rules) 6685 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect2Inputs ActiveX CLSID unicode access (web-client.rules) 6686 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect2Inputs ActiveX CLSID access (web-client.rules) 6687 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect1Input ActiveX function call access (web-client.rules) 7002 <-> Disabled <-> WEB-CLIENT excel url unicode overflow attempt (web-client.rules) 7004 <-> Disabled <-> WEB-CLIENT Internet.HHCtrl.1 ActiveX function call access (web-client.rules) 7006 <-> Disabled <-> WEB-CLIENT ASControls.InstallEngineCtl ActiveX function call access (web-client.rules) 7007 <-> Disabled <-> WEB-CLIENT AxDebugger.Document.1 ActiveX function call access (web-client.rules) 7008 <-> Disabled <-> WEB-CLIENT DirectAnimation.DAUserData ActiveX function call access (web-client.rules) 7009 <-> Disabled <-> WEB-CLIENT DirectAnimation.StructuredGraphicsControl ActiveX function call access (web-client.rules) 7010 <-> Disabled <-> WEB-CLIENT HtmlDlgSafeHelper.HtmlDlgSafeHelper.1 ActiveX function call access (web-client.rules) 7011 <-> Disabled <-> WEB-CLIENT HtmlDlgSafeHelper.HtmlDlgSafeHelper ActiveX function call access (web-client.rules) 7012 <-> Disabled <-> WEB-CLIENT Internet.PopupMenu.1 ActiveX function call access (web-client.rules) 7013 <-> Disabled <-> WEB-CLIENT Microsoft.ISCatAdm ActiveX function call access (web-client.rules) 7014 <-> Disabled <-> WEB-CLIENT NMSA.ASFSourceMediaDescription.1 ActiveX function call access (web-client.rules) 7015 <-> Disabled <-> WEB-CLIENT NMSA.MediaDescription ActiveX function call access (web-client.rules) 7016 <-> Disabled <-> WEB-CLIENT Object.Microsoft.DXTFilter ActiveX function call access (web-client.rules) 7017 <-> Disabled <-> WEB-CLIENT RDS.DataControl ActiveX function call access (web-client.rules) 7018 <-> Disabled <-> WEB-CLIENT Sysmon ActiveX function call access (web-client.rules) 7026 <-> Disabled <-> WEB-CLIENT RDS.Dataspace ActiveX function call access (web-client.rules) 7425 <-> Disabled <-> WEB-CLIENT 9x8Resize ActiveX CLSID access (web-client.rules) 7426 <-> Disabled <-> WEB-CLIENT 9x8Resize ActiveX CLSID unicode access (web-client.rules) 7427 <-> Disabled <-> WEB-CLIENT Allocator Fix ActiveX CLSID access (web-client.rules) 7428 <-> Disabled <-> WEB-CLIENT Allocator Fix ActiveX CLSID unicode access (web-client.rules) 7429 <-> Disabled <-> WEB-CLIENT Bitmap ActiveX CLSID access (web-client.rules) 7430 <-> Disabled <-> WEB-CLIENT Bitmap ActiveX CLSID unicode access (web-client.rules) 7431 <-> Disabled <-> WEB-CLIENT DirectFrame.DirectControl.1 ActiveX CLSID access (web-client.rules) 7432 <-> Disabled <-> WEB-CLIENT DirectFrame.DirectControl.1 ActiveX CLSID unicode access (web-client.rules) 7433 <-> Disabled <-> WEB-CLIENT DirectX Transform Wrapper Property Page ActiveX CLSID access (web-client.rules) 7434 <-> Disabled <-> WEB-CLIENT DirectX Transform Wrapper Property Page ActiveX CLSID unicode access (web-client.rules) 7435 <-> Disabled <-> WEB-CLIENT Dynamic Casts ActiveX CLSID access (web-client.rules) 7436 <-> Disabled <-> WEB-CLIENT Dynamic Casts ActiveX CLSID unicode access (web-client.rules) 7437 <-> Disabled <-> WEB-CLIENT Frame Eater ActiveX CLSID access (web-client.rules) 7438 <-> Disabled <-> WEB-CLIENT Frame Eater ActiveX CLSID unicode access (web-client.rules) 7439 <-> Disabled <-> WEB-CLIENT HTML Help ActiveX CLSID access (web-client.rules) 7440 <-> Disabled <-> WEB-CLIENT HTML Help ActiveX CLSID unicode access (web-client.rules) 7441 <-> Disabled <-> WEB-CLIENT HTML Help ActiveX CLSID unicode access (web-client.rules) 7442 <-> Disabled <-> WEB-CLIENT mmAEPlugIn.AEPlugIn.1 ActiveX CLSID access (web-client.rules) 7443 <-> Disabled <-> WEB-CLIENT mmAEPlugIn.AEPlugIn.1 ActiveX CLSID unicode access (web-client.rules) 7444 <-> Disabled <-> WEB-CLIENT Mmedia.AsyncMHandler.1 ActiveX CLSID access (web-client.rules) 7445 <-> Disabled <-> WEB-CLIENT Mmedia.AsyncMHandler.1 ActiveX CLSID unicode access (web-client.rules) 7446 <-> Disabled <-> WEB-CLIENT Record Queue ActiveX CLSID access (web-client.rules) 7447 <-> Disabled <-> WEB-CLIENT Record Queue ActiveX CLSID unicode access (web-client.rules) 7448 <-> Disabled <-> WEB-CLIENT ShotDetect ActiveX CLSID access (web-client.rules) 7449 <-> Disabled <-> WEB-CLIENT ShotDetect ActiveX CLSID unicode access (web-client.rules) 7450 <-> Disabled <-> WEB-CLIENT Stetch ActiveX CLSID access (web-client.rules) 7451 <-> Disabled <-> WEB-CLIENT Stetch ActiveX CLSID unicode access (web-client.rules) 7452 <-> Disabled <-> WEB-CLIENT WM Color Converter Filter ActiveX CLSID access (web-client.rules) 7453 <-> Disabled <-> WEB-CLIENT WM Color Converter Filter ActiveX CLSID unicode access (web-client.rules) 7454 <-> Disabled <-> WEB-CLIENT Wmm2ae.dll ActiveX CLSID access (web-client.rules) 7455 <-> Disabled <-> WEB-CLIENT Wmm2ae.dll ActiveX CLSID unicode access (web-client.rules) 7456 <-> Disabled <-> WEB-CLIENT Wmm2fxa.dll ActiveX CLSID access (web-client.rules) 7457 <-> Disabled <-> WEB-CLIENT Wmm2fxa.dll ActiveX CLSID unicode access (web-client.rules) 7458 <-> Disabled <-> WEB-CLIENT Wmm2fxb.dll ActiveX CLSID access (web-client.rules) 7459 <-> Disabled <-> WEB-CLIENT Wmm2fxb.dll ActiveX CLSID unicode access (web-client.rules) 7460 <-> Disabled <-> WEB-CLIENT WMT Audio Analyzer ActiveX CLSID access (web-client.rules) 7461 <-> Disabled <-> WEB-CLIENT WMT Audio Analyzer ActiveX CLSID unicode access (web-client.rules) 7462 <-> Disabled <-> WEB-CLIENT WMT Black Frame Generator ActiveX CLSID access (web-client.rules) 7463 <-> Disabled <-> WEB-CLIENT WMT Black Frame Generator ActiveX CLSID unicode access (web-client.rules) 7464 <-> Disabled <-> WEB-CLIENT WMT DeInterlace Filter ActiveX CLSID access (web-client.rules) 7465 <-> Disabled <-> WEB-CLIENT WMT DeInterlace Filter ActiveX CLSID unicode access (web-client.rules) 7466 <-> Disabled <-> WEB-CLIENT WMT DeInterlace Prop Page ActiveX CLSID access (web-client.rules) 7467 <-> Disabled <-> WEB-CLIENT WMT DeInterlace Prop Page ActiveX CLSID unicode access (web-client.rules) 7468 <-> Disabled <-> WEB-CLIENT WMT DirectX Transform Wrapper ActiveX CLSID access (web-client.rules) 7469 <-> Disabled <-> WEB-CLIENT WMT DirectX Transform Wrapper ActiveX CLSID unicode access (web-client.rules) 7470 <-> Disabled <-> WEB-CLIENT WMT DV Extract Filter ActiveX CLSID access (web-client.rules) 7471 <-> Disabled <-> WEB-CLIENT WMT DV Extract Filter ActiveX CLSID unicode access (web-client.rules) 7472 <-> Disabled <-> WEB-CLIENT WMT FormatConversion Prop Page ActiveX CLSID access (web-client.rules) 7473 <-> Disabled <-> WEB-CLIENT WMT FormatConversion Prop Page ActiveX CLSID unicode access (web-client.rules) 7474 <-> Disabled <-> WEB-CLIENT WMT FormatConversion ActiveX CLSID access (web-client.rules) 7475 <-> Disabled <-> WEB-CLIENT WMT FormatConversion ActiveX CLSID unicode access (web-client.rules) 7476 <-> Disabled <-> WEB-CLIENT WMT Import Filter ActiveX CLSID access (web-client.rules) 7477 <-> Disabled <-> WEB-CLIENT WMT Import Filter ActiveX CLSID unicode access (web-client.rules) 7478 <-> Disabled <-> WEB-CLIENT WMT Interlacer ActiveX CLSID access (web-client.rules) 7479 <-> Disabled <-> WEB-CLIENT WMT Interlacer ActiveX CLSID unicode access (web-client.rules) 7480 <-> Disabled <-> WEB-CLIENT WMT Log Filter ActiveX CLSID access (web-client.rules) 7481 <-> Disabled <-> WEB-CLIENT WMT Log Filter ActiveX CLSID unicode access (web-client.rules) 7482 <-> Disabled <-> WEB-CLIENT WMT MuxDeMux Filter ActiveX CLSID access (web-client.rules) 7483 <-> Disabled <-> WEB-CLIENT WMT MuxDeMux Filter ActiveX CLSID unicode access (web-client.rules) 7484 <-> Disabled <-> WEB-CLIENT WMT Sample Info Filter ActiveX CLSID access (web-client.rules) 7485 <-> Disabled <-> WEB-CLIENT WMT Sample Info Filter ActiveX CLSID unicode access (web-client.rules) 7486 <-> Disabled <-> WEB-CLIENT WMT Screen Capture Filter Task Page ActiveX CLSID access (web-client.rules) 7487 <-> Disabled <-> WEB-CLIENT WMT Screen Capture Filter Task Page ActiveX CLSID unicode access (web-client.rules) 7488 <-> Disabled <-> WEB-CLIENT WMT Screen capture Filter ActiveX CLSID access (web-client.rules) 7489 <-> Disabled <-> WEB-CLIENT WMT Screen capture Filter ActiveX CLSID unicode access (web-client.rules) 7490 <-> Disabled <-> WEB-CLIENT WMT Switch Filter ActiveX CLSID access (web-client.rules) 7491 <-> Disabled <-> WEB-CLIENT WMT Switch Filter ActiveX CLSID unicode access (web-client.rules) 7492 <-> Disabled <-> WEB-CLIENT WMT Virtual Renderer ActiveX CLSID access (web-client.rules) 7493 <-> Disabled <-> WEB-CLIENT WMT Virtual Renderer ActiveX CLSID unicode access (web-client.rules) 7494 <-> Disabled <-> WEB-CLIENT WMT Virtual Source ActiveX CLSID access (web-client.rules) 7495 <-> Disabled <-> WEB-CLIENT WMT Virtual Source ActiveX CLSID unicode access (web-client.rules) 7496 <-> Disabled <-> WEB-CLIENT WMT Volume ActiveX CLSID access (web-client.rules) 7497 <-> Disabled <-> WEB-CLIENT WMT Volume ActiveX CLSID unicode access (web-client.rules) 7498 <-> Disabled <-> WEB-CLIENT WM TV Out Smooth Picture Filter ActiveX CLSID access (web-client.rules) 7499 <-> Disabled <-> WEB-CLIENT WM TV Out Smooth Picture Filter ActiveX CLSID unicode access (web-client.rules) 7500 <-> Disabled <-> WEB-CLIENT WM VIH2 Fix ActiveX CLSID access (web-client.rules) 7501 <-> Disabled <-> WEB-CLIENT WM VIH2 Fix ActiveX CLSID unicode access (web-client.rules) 7502 <-> Disabled <-> WEB-CLIENT tsuserex.ADsTSUserEx.1 ActiveX CLSID access (web-client.rules) 7503 <-> Disabled <-> WEB-CLIENT tsuserex.ADsTSUserEx.1 ActiveX CLSID unicode access (web-client.rules) 7862 <-> Disabled <-> WEB-CLIENT McSubMgr.IsAppExpired ActiveX function call access (web-client.rules) 7863 <-> Disabled <-> WEB-CLIENT McSubMgr.IsOldAppInstalled ActiveX function call access (web-client.rules) 7864 <-> Disabled <-> WEB-CLIENT McSubMgr ActiveX CLSID access (web-client.rules) 7865 <-> Disabled <-> WEB-CLIENT McSubMgr ActiveX CLSID unicode access (web-client.rules) 7866 <-> Disabled <-> WEB-CLIENT ADODB.Connection ActiveX CLSID access (web-client.rules) 7867 <-> Disabled <-> WEB-CLIENT ADODB.Connection ActiveX CLSID unicode access (web-client.rules) 7868 <-> Disabled <-> WEB-CLIENT ADODB.Recordset ActiveX CLSID access (web-client.rules) 7869 <-> Disabled <-> WEB-CLIENT ADODB.Recordset ActiveX CLSID unicode access (web-client.rules) 7870 <-> Disabled <-> WEB-CLIENT Microsoft Office Data Source Control 9.0 ActiveX CLSID access (web-client.rules) 7871 <-> Disabled <-> WEB-CLIENT Microsoft Office Data Source Control 9.0 ActiveX CLSID unicode access (web-client.rules) 7872 <-> Disabled <-> WEB-CLIENT Microsoft Office Spreadsheet 10.0 ActiveX CLSID access (web-client.rules) 7873 <-> Disabled <-> WEB-CLIENT Microsoft Office Spreadsheet 10.0 ActiveX CLSID unicode access (web-client.rules) 7874 <-> Disabled <-> WEB-CLIENT Microsoft Office PivotTable 10.0 ActiveX CLSID access (web-client.rules) 7875 <-> Disabled <-> WEB-CLIENT Microsoft Office PivotTable 10.0 ActiveX CLSID unicode access (web-client.rules) 7876 <-> Disabled <-> WEB-CLIENT Microsoft Office Data Source Control 10.0 ActiveX CLSID access (web-client.rules) 7877 <-> Disabled <-> WEB-CLIENT Microsoft Office Data Source Control 10.0 ActiveX CLSID unicode access (web-client.rules) 7878 <-> Disabled <-> WEB-CLIENT AxMetaStream.MetaStreamCtl ActiveX CLSID access (web-client.rules) 7879 <-> Disabled <-> WEB-CLIENT AxMetaStream.MetaStreamCtl ActiveX CLSID unicode access (web-client.rules) 7880 <-> Disabled <-> WEB-CLIENT AxMetaStream.MetaStreamCtlSecondary ActiveX CLSID access (web-client.rules) 7881 <-> Disabled <-> WEB-CLIENT AxMetaStream.MetaStreamCtlSecondary ActiveX CLSID unicode access (web-client.rules) 7882 <-> Disabled <-> WEB-CLIENT AccSync.AccSubNotHandler ActiveX CLSID access (web-client.rules) 7883 <-> Disabled <-> WEB-CLIENT AccSync.AccSubNotHandler ActiveX CLSID unicode access (web-client.rules) 7884 <-> Disabled <-> WEB-CLIENT AolCalSvr.ACCalendarListCtrl ActiveX CLSID access (web-client.rules) 7885 <-> Disabled <-> WEB-CLIENT AolCalSvr.ACCalendarListCtrl ActiveX CLSID unicode access (web-client.rules) 7886 <-> Disabled <-> WEB-CLIENT AolCalSvr.ACDictionary ActiveX CLSID access (web-client.rules) 7887 <-> Disabled <-> WEB-CLIENT AolCalSvr.ACDictionary ActiveX CLSID unicode access (web-client.rules) 7888 <-> Disabled <-> WEB-CLIENT AOLFlash.AOLFlash ActiveX CLSID access (web-client.rules) 7889 <-> Disabled <-> WEB-CLIENT AOLFlash.AOLFlash ActiveX CLSID unicode access (web-client.rules) 7890 <-> Disabled <-> WEB-CLIENT AOL.MemExpWz ActiveX CLSID access (web-client.rules) 7891 <-> Disabled <-> WEB-CLIENT AOL.MemExpWz ActiveX CLSID unicode access (web-client.rules) 7892 <-> Disabled <-> WEB-CLIENT AOL Phobos Class ActiveX CLSID access (web-client.rules) 7893 <-> Disabled <-> WEB-CLIENT AOL Phobos Class ActiveX CLSID unicode access (web-client.rules) 7894 <-> Disabled <-> WEB-CLIENT AOL.PicDownloadCtrl ActiveX CLSID access (web-client.rules) 7895 <-> Disabled <-> WEB-CLIENT AOL.PicDownloadCtrl ActiveX CLSID unicode access (web-client.rules) 7896 <-> Disabled <-> WEB-CLIENT AOL.PicEditCtrl ActiveX CLSID access (web-client.rules) 7897 <-> Disabled <-> WEB-CLIENT AOL.PicEditCtrl ActiveX CLSID unicode access (web-client.rules) 7898 <-> Disabled <-> WEB-CLIENT AOL.PicSsvrCtrl ActiveX CLSID access (web-client.rules) 7899 <-> Disabled <-> WEB-CLIENT AOL.PicSsvrCtrl ActiveX CLSID unicode access (web-client.rules) 7900 <-> Disabled <-> WEB-CLIENT AOL.UPFCtrl ActiveX CLSID access (web-client.rules) 7901 <-> Disabled <-> WEB-CLIENT AOL.UPFCtrl ActiveX CLSID unicode access (web-client.rules) 7902 <-> Disabled <-> WEB-CLIENT CDDBControlAOL.CDDBAOLControl ActiveX CLSID access (web-client.rules) 7903 <-> Disabled <-> WEB-CLIENT CDDBControlAOL.CDDBAOLControl ActiveX CLSID unicode access (web-client.rules) 7904 <-> Disabled <-> WEB-CLIENT CDL Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7905 <-> Disabled <-> WEB-CLIENT CDL Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7906 <-> Disabled <-> WEB-CLIENT CDO.KnowledgeSearchFolder ActiveX CLSID access (web-client.rules) 7907 <-> Disabled <-> WEB-CLIENT CDO.KnowledgeSearchFolder ActiveX CLSID unicode access (web-client.rules) 7908 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Chroma ActiveX CLSID access (web-client.rules) 7909 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Chroma ActiveX CLSID unicode access (web-client.rules) 7910 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.DropShadow ActiveX CLSID access (web-client.rules) 7911 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.DropShadow ActiveX CLSID unicode access (web-client.rules) 7912 <-> Disabled <-> WEB-CLIENT DX3DTransform.Microsoft.Shapes ActiveX CLSID access (web-client.rules) 7913 <-> Disabled <-> WEB-CLIENT DX3DTransform.Microsoft.Shapes ActiveX CLSID unicode access (web-client.rules) 7914 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.NDFXArtEffects ActiveX CLSID access (web-client.rules) 7915 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.NDFXArtEffects ActiveX CLSID unicode access (web-client.rules) 7916 <-> Disabled <-> WEB-CLIENT CLSID_IMimeInternational ActiveX CLSID access (web-client.rules) 7917 <-> Disabled <-> WEB-CLIENT CLSID_IMimeInternational ActiveX CLSID unicode access (web-client.rules) 7918 <-> Disabled <-> WEB-CLIENT CoAxTrackVideo Class ActiveX CLSID access (web-client.rules) 7919 <-> Disabled <-> WEB-CLIENT CoAxTrackVideo Class ActiveX CLSID unicode access (web-client.rules) 7920 <-> Disabled <-> WEB-CLIENT DsPropertyPages.OU ActiveX CLSID access (web-client.rules) 7921 <-> Disabled <-> WEB-CLIENT DsPropertyPages.OU ActiveX CLSID unicode access (web-client.rules) 7922 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.RevealTrans ActiveX CLSID access (web-client.rules) 7923 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.RevealTrans ActiveX CLSID unicode access (web-client.rules) 7924 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Shadow ActiveX CLSID access (web-client.rules) 7925 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Shadow ActiveX CLSID unicode access (web-client.rules) 7926 <-> Disabled <-> WEB-CLIENT DXTFilter ActiveX CLSID access (web-client.rules) 7927 <-> Disabled <-> WEB-CLIENT DXTFilter ActiveX CLSID unicode access (web-client.rules) 7928 <-> Disabled <-> WEB-CLIENT file or local Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7929 <-> Disabled <-> WEB-CLIENT file or local Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7930 <-> Disabled <-> WEB-CLIENT FolderItem2 ActiveX CLSID access (web-client.rules) 7931 <-> Disabled <-> WEB-CLIENT FolderItem2 ActiveX CLSID unicode access (web-client.rules) 7932 <-> Disabled <-> WEB-CLIENT FolderItems3 ActiveX CLSID access (web-client.rules) 7933 <-> Disabled <-> WEB-CLIENT FolderItems3 ActiveX CLSID unicode access (web-client.rules) 7934 <-> Disabled <-> WEB-CLIENT ftp Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7935 <-> Disabled <-> WEB-CLIENT ftp Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7936 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Glow ActiveX CLSID access (web-client.rules) 7937 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Glow ActiveX CLSID unicode access (web-client.rules) 7938 <-> Disabled <-> WEB-CLIENT gopher Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7939 <-> Disabled <-> WEB-CLIENT gopher Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7940 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Gradient ActiveX CLSID access (web-client.rules) 7941 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Gradient ActiveX CLSID unicode access (web-client.rules) 7942 <-> Disabled <-> WEB-CLIENT http Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7943 <-> Disabled <-> WEB-CLIENT http Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7944 <-> Disabled <-> WEB-CLIENT https Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7945 <-> Disabled <-> WEB-CLIENT https Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7946 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MaskFilter ActiveX CLSID access (web-client.rules) 7947 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MaskFilter ActiveX CLSID unicode access (web-client.rules) 7948 <-> Disabled <-> WEB-CLIENT Microsoft Common Browser Architecture ActiveX CLSID access (web-client.rules) 7949 <-> Disabled <-> WEB-CLIENT Microsoft Common Browser Architecture ActiveX CLSID unicode access (web-client.rules) 7950 <-> Disabled <-> WEB-CLIENT Microsoft DirectAnimation Control ActiveX CLSID access (web-client.rules) 7951 <-> Disabled <-> WEB-CLIENT Microsoft DirectAnimation Control ActiveX CLSID unicode access (web-client.rules) 7952 <-> Disabled <-> WEB-CLIENT Microsoft DirectAnimation Windowed Control ActiveX CLSID access (web-client.rules) 7953 <-> Disabled <-> WEB-CLIENT Microsoft DirectAnimation Windowed Control ActiveX CLSID unicode access (web-client.rules) 7954 <-> Disabled <-> WEB-CLIENT Microsoft Forms 2.0 ComboBox ActiveX CLSID access (web-client.rules) 7955 <-> Disabled <-> WEB-CLIENT Microsoft Forms 2.0 ComboBox ActiveX CLSID unicode access (web-client.rules) 7956 <-> Disabled <-> WEB-CLIENT Microsoft Forms 2.0 ListBox ActiveX CLSID access (web-client.rules) 7957 <-> Disabled <-> WEB-CLIENT Microsoft Forms 2.0 ListBox ActiveX CLSID unicode access (web-client.rules) 7958 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7959 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7960 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7961 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7962 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7963 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7964 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7965 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7966 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7967 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7968 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7969 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7970 <-> Disabled <-> WEB-CLIENT PostBootReminder object ActiveX CLSID access (web-client.rules) 7971 <-> Disabled <-> WEB-CLIENT PostBootReminder object ActiveX CLSID unicode access (web-client.rules) 7972 <-> Disabled <-> WEB-CLIENT RealPlayer G2 Control ActiveX CLSID access (web-client.rules) 7973 <-> Disabled <-> WEB-CLIENT RealPlayer G2 Control ActiveX CLSID unicode access (web-client.rules) 7974 <-> Disabled <-> WEB-CLIENT Rendezvous Class ActiveX CLSID access (web-client.rules) 7975 <-> Disabled <-> WEB-CLIENT Rendezvous Class ActiveX CLSID unicode access (web-client.rules) 7976 <-> Disabled <-> WEB-CLIENT ShellFolder for CD Burning ActiveX CLSID access (web-client.rules) 7977 <-> Disabled <-> WEB-CLIENT ShellFolder for CD Burning ActiveX CLSID unicode access (web-client.rules) 7978 <-> Disabled <-> WEB-CLIENT ShockwaveFlash.ShockwaveFlash ActiveX CLSID access (web-client.rules) 7979 <-> Disabled <-> WEB-CLIENT ShockwaveFlash.ShockwaveFlash ActiveX CLSID unicode access (web-client.rules) 7980 <-> Disabled <-> WEB-CLIENT ShockwaveFlash.ShockwaveFlash.9 ActiveX function call access (web-client.rules) 7981 <-> Disabled <-> WEB-CLIENT Snapshot Viewer General Property Page Object ActiveX CLSID access (web-client.rules) 7982 <-> Disabled <-> WEB-CLIENT Snapshot Viewer General Property Page Object ActiveX CLSID unicode access (web-client.rules) 7983 <-> Disabled <-> WEB-CLIENT SuperBuddy Class ActiveX CLSID access (web-client.rules) 7984 <-> Disabled <-> WEB-CLIENT SuperBuddy Class ActiveX CLSID unicode access (web-client.rules) 7987 <-> Disabled <-> WEB-CLIENT WebViewFolderIcon.WebViewFolderIcon.2 ActiveX CLSID access (web-client.rules) 7988 <-> Disabled <-> WEB-CLIENT WebViewFolderIcon.WebViewFolderIcon.2 ActiveX CLSID unicode access (web-client.rules) 7989 <-> Disabled <-> WEB-CLIENT WIA FileSystem USD ActiveX CLSID access (web-client.rules) 7990 <-> Disabled <-> WEB-CLIENT WIA FileSystem USD ActiveX CLSID unicode access (web-client.rules) 7991 <-> Disabled <-> WEB-CLIENT ACM Class Manager ActiveX CLSID access (web-client.rules) 7992 <-> Disabled <-> WEB-CLIENT ACM Class Manager ActiveX CLSID unicode access (web-client.rules) 7993 <-> Disabled <-> WEB-CLIENT clbcatex.dll ActiveX CLSID access (web-client.rules) 7994 <-> Disabled <-> WEB-CLIENT clbcatex.dll ActiveX CLSID unicode access (web-client.rules) 7995 <-> Disabled <-> WEB-CLIENT clbcatq.dll ActiveX CLSID access (web-client.rules) 7996 <-> Disabled <-> WEB-CLIENT clbcatq.dll ActiveX CLSID unicode access (web-client.rules) 7997 <-> Disabled <-> WEB-CLIENT CLSID_ApprenticeICW ActiveX CLSID access (web-client.rules) 7998 <-> Disabled <-> WEB-CLIENT CLSID_ApprenticeICW ActiveX CLSID unicode access (web-client.rules) 7999 <-> Disabled <-> WEB-CLIENT CLSID_CDIDeviceActionConfigPage ActiveX CLSID access (web-client.rules) 8000 <-> Disabled <-> WEB-CLIENT CLSID_CDIDeviceActionConfigPage ActiveX CLSID unicode access (web-client.rules) 8001 <-> Disabled <-> WEB-CLIENT CommunicationManager ActiveX CLSID access (web-client.rules) 8002 <-> Disabled <-> WEB-CLIENT CommunicationManager ActiveX CLSID unicode access (web-client.rules) 8003 <-> Disabled <-> WEB-CLIENT Content.mbcontent.1 ActiveX CLSID access (web-client.rules) 8004 <-> Disabled <-> WEB-CLIENT Content.mbcontent.1 ActiveX CLSID unicode access (web-client.rules) 8005 <-> Disabled <-> WEB-CLIENT DiskManagement.Connection ActiveX CLSID access (web-client.rules) 8006 <-> Disabled <-> WEB-CLIENT DiskManagement.Connection ActiveX CLSID unicode access (web-client.rules) 8007 <-> Disabled <-> WEB-CLIENT Dutch_Dutch Stemmer ActiveX CLSID access (web-client.rules) 8008 <-> Disabled <-> WEB-CLIENT Dutch_Dutch Stemmer ActiveX CLSID unicode access (web-client.rules) 8009 <-> Disabled <-> WEB-CLIENT English_UK Stemmer ActiveX CLSID access (web-client.rules) 8010 <-> Disabled <-> WEB-CLIENT English_UK Stemmer ActiveX CLSID unicode access (web-client.rules) 8011 <-> Disabled <-> WEB-CLIENT English_US Stemmer ActiveX CLSID access (web-client.rules) 8012 <-> Disabled <-> WEB-CLIENT English_US Stemmer ActiveX CLSID unicode access (web-client.rules) 8013 <-> Disabled <-> WEB-CLIENT French_French Stemmer ActiveX CLSID access (web-client.rules) 8014 <-> Disabled <-> WEB-CLIENT French_French Stemmer ActiveX CLSID unicode access (web-client.rules) 8015 <-> Disabled <-> WEB-CLIENT German_German Stemmer ActiveX CLSID access (web-client.rules) 8016 <-> Disabled <-> WEB-CLIENT German_German Stemmer ActiveX CLSID unicode access (web-client.rules) 8017 <-> Disabled <-> WEB-CLIENT ICM Class Manager ActiveX CLSID access (web-client.rules) 8018 <-> Disabled <-> WEB-CLIENT ICM Class Manager ActiveX CLSID unicode access (web-client.rules) 8019 <-> Disabled <-> WEB-CLIENT Internet Explorer Address Bar ActiveX CLSID access (web-client.rules) 8020 <-> Disabled <-> WEB-CLIENT Internet Explorer Address Bar ActiveX CLSID unicode access (web-client.rules) 8021 <-> Disabled <-> WEB-CLIENT ISSimpleCommandCreator.1 ActiveX CLSID access (web-client.rules) 8022 <-> Disabled <-> WEB-CLIENT ISSimpleCommandCreator.1 ActiveX CLSID unicode access (web-client.rules) 8023 <-> Disabled <-> WEB-CLIENT Italian_Italian Stemmer ActiveX CLSID access (web-client.rules) 8024 <-> Disabled <-> WEB-CLIENT Italian_Italian Stemmer ActiveX CLSID unicode access (web-client.rules) 8025 <-> Disabled <-> WEB-CLIENT Microsoft HTML Window Security Proxy ActiveX CLSID access (web-client.rules) 8026 <-> Disabled <-> WEB-CLIENT Microsoft HTML Window Security Proxy ActiveX CLSID unicode access (web-client.rules) 8027 <-> Disabled <-> WEB-CLIENT Microsoft WBEM Event Subsystem ActiveX CLSID access (web-client.rules) 8028 <-> Disabled <-> WEB-CLIENT Microsoft WBEM Event Subsystem ActiveX CLSID unicode access (web-client.rules) 8029 <-> Disabled <-> WEB-CLIENT MidiOut Class Manager ActiveX CLSID access (web-client.rules) 8030 <-> Disabled <-> WEB-CLIENT MidiOut Class Manager ActiveX CLSID unicode access (web-client.rules) 8031 <-> Disabled <-> WEB-CLIENT Mslablti.MarshalableTI.1 ActiveX CLSID access (web-client.rules) 8032 <-> Disabled <-> WEB-CLIENT Mslablti.MarshalableTI.1 ActiveX CLSID unicode access (web-client.rules) 8033 <-> Disabled <-> WEB-CLIENT QC.MessageMover.1 ActiveX CLSID access (web-client.rules) 8034 <-> Disabled <-> WEB-CLIENT QC.MessageMover.1 ActiveX CLSID unicode access (web-client.rules) 8035 <-> Disabled <-> WEB-CLIENT Spanish_Modern Stemmer ActiveX CLSID access (web-client.rules) 8036 <-> Disabled <-> WEB-CLIENT Spanish_Modern Stemmer ActiveX CLSID unicode access (web-client.rules) 8037 <-> Disabled <-> WEB-CLIENT Swedish_Default Stemmer ActiveX CLSID access (web-client.rules) 8038 <-> Disabled <-> WEB-CLIENT Swedish_Default Stemmer ActiveX CLSID unicode access (web-client.rules) 8039 <-> Disabled <-> WEB-CLIENT syncui.dll ActiveX CLSID access (web-client.rules) 8040 <-> Disabled <-> WEB-CLIENT syncui.dll ActiveX CLSID unicode access (web-client.rules) 8041 <-> Disabled <-> WEB-CLIENT VFW Capture Class Manager ActiveX CLSID access (web-client.rules) 8042 <-> Disabled <-> WEB-CLIENT VFW Capture Class Manager ActiveX CLSID unicode access (web-client.rules) 8043 <-> Disabled <-> WEB-CLIENT Video Effect Class Manager 1 Input ActiveX CLSID access (web-client.rules) 8044 <-> Disabled <-> WEB-CLIENT Video Effect Class Manager 1 Input ActiveX CLSID unicode access (web-client.rules) 8045 <-> Disabled <-> WEB-CLIENT Video Effect Class Manager 2 Input ActiveX CLSID access (web-client.rules) 8046 <-> Disabled <-> WEB-CLIENT Video Effect Class Manager 2 Input ActiveX CLSID unicode access (web-client.rules) 8047 <-> Disabled <-> WEB-CLIENT WaveIn Class Manager ActiveX CLSID access (web-client.rules) 8048 <-> Disabled <-> WEB-CLIENT WaveIn Class Manager ActiveX CLSID unicode access (web-client.rules) 8049 <-> Disabled <-> WEB-CLIENT WaveOut and DSound Class Manager ActiveX CLSID access (web-client.rules) 8050 <-> Disabled <-> WEB-CLIENT WaveOut and DSound Class Manager ActiveX CLSID unicode access (web-client.rules) 8051 <-> Disabled <-> WEB-CLIENT WDM Instance Provider ActiveX CLSID access (web-client.rules) 8052 <-> Disabled <-> WEB-CLIENT WDM Instance Provider ActiveX CLSID unicode access (web-client.rules) 8058 <-> Disabled <-> WEB-CLIENT Mozilla javascript navigator object access (web-client.rules) 8061 <-> Disabled <-> WEB-CLIENT ADODB.Stream ActiveX CLSID access (web-client.rules) 8062 <-> Disabled <-> WEB-CLIENT ADODB.Stream ActiveX CLSID unicode access (web-client.rules) 8063 <-> Disabled <-> WEB-CLIENT ADODB.Stream ActiveX function call access (web-client.rules) 8064 <-> Disabled <-> WEB-CLIENT Scriptlet.Typelib ActiveX CLSID access (web-client.rules) 8065 <-> Disabled <-> WEB-CLIENT Scriptlet.Typelib ActiveX CLSID unicode access (web-client.rules) 8066 <-> Disabled <-> WEB-CLIENT Windows Scripting Host Shell ActiveX CLSID access (web-client.rules) 8067 <-> Disabled <-> WEB-CLIENT Windows Scripting Host Shell ActiveX CLSID unicode access (web-client.rules) 8068 <-> Disabled <-> WEB-CLIENT Windows Scripting Host Shell ActiveX function call access (web-client.rules) 8069 <-> Disabled <-> WEB-CLIENT Microsoft Virtual Machine ActiveX CLSID access (web-client.rules) 8070 <-> Disabled <-> WEB-CLIENT Microsoft Virtual Machine ActiveX CLSID unicode access (web-client.rules) 8091 <-> Disabled <-> WEB-CLIENT RealPlayer Realpix file format string overflow attempt (web-client.rules) 8363 <-> Disabled <-> WEB-CLIENT Business Object Factory ActiveX CLSID access (web-client.rules) 8364 <-> Disabled <-> WEB-CLIENT Business Object Factory ActiveX CLSID unicode access (web-client.rules) 8365 <-> Disabled <-> WEB-CLIENT DExplore.AppObj.8.0 ActiveX CLSID access (web-client.rules) 8366 <-> Disabled <-> WEB-CLIENT DExplore.AppObj.8.0 ActiveX CLSID unicode access (web-client.rules) 8367 <-> Disabled <-> WEB-CLIENT Microsoft.DbgClr.DTE.8.0 ActiveX CLSID access (web-client.rules) 8368 <-> Disabled <-> WEB-CLIENT Microsoft.DbgClr.DTE.8.0 ActiveX CLSID unicode access (web-client.rules) 8369 <-> Disabled <-> WEB-CLIENT WMIScriptUtils.WMIObjectBroker2.1 ActiveX CLSID access (web-client.rules) 8370 <-> Disabled <-> WEB-CLIENT WMIScriptUtils.WMIObjectBroker2.1 ActiveX CLSID unicode access (web-client.rules) 8371 <-> Disabled <-> WEB-CLIENT Outlook.Application ActiveX CLSID access (web-client.rules) 8372 <-> Disabled <-> WEB-CLIENT Outlook.Application ActiveX CLSID unicode access (web-client.rules) 8373 <-> Disabled <-> WEB-CLIENT VsmIDE.DTE ActiveX CLSID access (web-client.rules) 8374 <-> Disabled <-> WEB-CLIENT VsmIDE.DTE ActiveX CLSID unicode access (web-client.rules) 8375 <-> Disabled <-> WEB-CLIENT QuickTime Object ActiveX CLSID access (web-client.rules) 8376 <-> Disabled <-> WEB-CLIENT QuickTime Object ActiveX CLSID unicode access (web-client.rules) 8377 <-> Disabled <-> WEB-CLIENT RealPlayer Download Handler ActiveX CLSID access (web-client.rules) 8378 <-> Disabled <-> WEB-CLIENT RealPlayer Download Handler ActiveX CLSID unicode access (web-client.rules) 8379 <-> Disabled <-> WEB-CLIENT Xml2Dex ActiveX CLSID access (web-client.rules) 8380 <-> Disabled <-> WEB-CLIENT Xml2Dex ActiveX CLSID unicode access (web-client.rules) 8381 <-> Disabled <-> WEB-CLIENT RealPlayer SMIL Download Handler ActiveX CLSID access (web-client.rules) 8382 <-> Disabled <-> WEB-CLIENT RealPlayer SMIL Download Handler ActiveX CLSID unicode access (web-client.rules) 8383 <-> Disabled <-> WEB-CLIENT RealPlayer RAM Download Handler ActiveX CLSID access (web-client.rules) 8384 <-> Disabled <-> WEB-CLIENT RealPlayer RAM Download Handler ActiveX CLSID unicode access (web-client.rules) 8385 <-> Disabled <-> WEB-CLIENT RealPlayer Playback Handler ActiveX CLSID access (web-client.rules) 8386 <-> Disabled <-> WEB-CLIENT RealPlayer Playback Handler ActiveX CLSID unicode access (web-client.rules) 8387 <-> Disabled <-> WEB-CLIENT RealPlayer RNX Download Handler ActiveX CLSID access (web-client.rules) 8388 <-> Disabled <-> WEB-CLIENT RealPlayer RNX Download Handler ActiveX CLSID unicode access (web-client.rules) 8389 <-> Disabled <-> WEB-CLIENT RealPlayer RMP Download Handler ActiveX CLSID access (web-client.rules) 8390 <-> Disabled <-> WEB-CLIENT RealPlayer RMP Download Handler ActiveX CLSID unicode access (web-client.rules) 8391 <-> Disabled <-> WEB-CLIENT RFXInstMgr Class ActiveX CLSID access (web-client.rules) 8392 <-> Disabled <-> WEB-CLIENT RFXInstMgr Class ActiveX CLSID unicode access (web-client.rules) 8393 <-> Disabled <-> WEB-CLIENT WebDetectFrm ActiveX CLSID access (web-client.rules) 8394 <-> Disabled <-> WEB-CLIENT WebDetectFrm ActiveX CLSID unicode access (web-client.rules) 8395 <-> Disabled <-> WEB-CLIENT DX3DTransform.Microsoft.CrShatter ActiveX CLSID access (web-client.rules) 8396 <-> Disabled <-> WEB-CLIENT DX3DTransform.Microsoft.CrShatter ActiveX CLSID unicode access (web-client.rules) 8397 <-> Disabled <-> WEB-CLIENT Microsoft Office List 11.0 ActiveX CLSID access (web-client.rules) 8398 <-> Disabled <-> WEB-CLIENT Microsoft Office List 11.0 ActiveX CLSID unicode access (web-client.rules) 8399 <-> Disabled <-> WEB-CLIENT Microsoft.WebCapture ActiveX CLSID access (web-client.rules) 8400 <-> Disabled <-> WEB-CLIENT Microsoft.WebCapture ActiveX CLSID unicode access (web-client.rules) 8401 <-> Disabled <-> WEB-CLIENT Windows Media Services DRM Storage ActiveX CLSID access (web-client.rules) 8402 <-> Disabled <-> WEB-CLIENT Windows Media Services DRM Storage ActiveX CLSID unicode access (web-client.rules) 8403 <-> Disabled <-> WEB-CLIENT XML Schmea Cache 6.0 ActiveX CLSID access (web-client.rules) 8404 <-> Disabled <-> WEB-CLIENT XML Schmea Cache 6.0 ActiveX CLSID unicode access (web-client.rules) 8405 <-> Disabled <-> WEB-CLIENT XML HTTP 6.0 ActiveX CLSID access (web-client.rules) 8406 <-> Disabled <-> WEB-CLIENT XML HTTP 6.0 ActiveX CLSID unicode access (web-client.rules) 8407 <-> Disabled <-> WEB-CLIENT VisualExec Control ActiveX CLSID access (web-client.rules) 8408 <-> Disabled <-> WEB-CLIENT VisualExec Control ActiveX CLSID unicode access (web-client.rules) 8409 <-> Disabled <-> WEB-CLIENT RealPlayer Stream Handler ActiveX CLSID access (web-client.rules) 8410 <-> Disabled <-> WEB-CLIENT RealPlayer Stream Handler ActiveX CLSID unicode access (web-client.rules) 8411 <-> Disabled <-> WEB-CLIENT DocFind Command ActiveX CLSID access (web-client.rules) 8412 <-> Disabled <-> WEB-CLIENT DocFind Command ActiveX CLSID unicode access (web-client.rules) 8416 <-> Disabled <-> WEB-CLIENT VML fill method overflow attempt (web-client.rules) 8417 <-> Disabled <-> WEB-CLIENT TriEditDocument.TriEditDocument ActiveX function call access (web-client.rules) 8418 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.RevealTrans ActiveX function call access (web-client.rules) 8420 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Gradient ActiveX function call access (web-client.rules) 8421 <-> Disabled <-> WEB-CLIENT OWC11.DataSourceControl.11 ActiveX function call access (web-client.rules) 8422 <-> Disabled <-> WEB-CLIENT OVCtl.OVCtl.1 ActiveX function call access (web-client.rules) 8423 <-> Disabled <-> WEB-CLIENT CEnroll.CEnroll.2 ActiveX function call access (web-client.rules) 8424 <-> Disabled <-> WEB-CLIENT Microsoft Forms 2.0 ListBox ActiveX function call access (web-client.rules) 8425 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.NDFXArtEffects ActiveX function call access (web-client.rules)
