Sourcefire VRT Update
Date: 2006-11-06
This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack.
The format of the file is:
sid - Message (rule group)
New rules: 8496 <-> Enabled <-> MS-SQL sp_oacreate unicode vulnerable function attempt (sql.rules) 8497 <-> Enabled <-> MS-SQL sp_oacreate vulnerable function attempt (sql.rules) 8498 <-> Enabled <-> MS-SQL/SMB sp_oacreate unicode vulnerable function attempt (sql.rules) 8499 <-> Enabled <-> MS-SQL xp_displayparamstmt unicode vulnerable function attempt (sql.rules) 8500 <-> Enabled <-> MS-SQL/SMB xp_displayparamstmt unicode vulnerable function attempt (sql.rules) 8501 <-> Enabled <-> MS-SQL xp_displayparamstmt vulnerable function attempt (sql.rules) 8502 <-> Enabled <-> MS-SQL xp_enumresultset unicode vulnerable function attempt (sql.rules) 8503 <-> Enabled <-> MS-SQL/SMB xp_enumresultset unicode vulnerable function attempt (sql.rules) 8504 <-> Enabled <-> MS-SQL xp_enumresultset vulnerable function attempt (sql.rules) 8505 <-> Enabled <-> MS-SQL xp_oadestroy unicode vulnerable function attempt (sql.rules) 8506 <-> Enabled <-> MS-SQL/SMB xp_oadestroy unicode vulnerable function attempt (sql.rules) 8507 <-> Enabled <-> MS-SQL xp_oadestroy vulnerable function attempt (sql.rules) 8508 <-> Enabled <-> MS-SQL xp_oagetproperty unicode vulnerable function attempt (sql.rules) 8509 <-> Enabled <-> MS-SQL/SMB xp_oagetproperty unicode vulnerable function attempt (sql.rules) 8510 <-> Enabled <-> MS-SQL xp_oagetproperty vulnerable function attempt (sql.rules) 8511 <-> Enabled <-> MS-SQL xp_oamethod unicode vulnerable function attempt (sql.rules) 8512 <-> Enabled <-> MS-SQL xp_oamethod vulnerable function attempt (sql.rules) 8513 <-> Enabled <-> MS-SQL/SMB xp_oamethod unicode vulnerable function attempt (sql.rules) 8514 <-> Enabled <-> MS-SQL xp_oasetproperty unicode vulnerable function attempt (sql.rules) 8515 <-> Enabled <-> MS-SQL/SMB xp_oasetproperty unicode vulnerable function attempt (sql.rules) 8516 <-> Enabled <-> MS-SQL xp_oasetproperty vulnerable function attempt (sql.rules) 8517 <-> Enabled <-> MS-SQL xp_peekqueue unicode vulnerable function attempt (sql.rules) 8518 <-> Enabled <-> MS-SQL/SMB xp_peekqueue unicode vulnerable function attempt (sql.rules) 8519 <-> Enabled <-> MS-SQL xp_peekqueue vulnerable function attempt (sql.rules) 8520 <-> Enabled <-> MS-SQL xp_printstatements unicode vulnerable function attempt (sql.rules) 8521 <-> Enabled <-> MS-SQL/SMB xp_printstatements unicode vulnerable function attempt (sql.rules) 8522 <-> Enabled <-> MS-SQL xp_printstatements vulnerable function attempt (sql.rules) 8523 <-> Enabled <-> MS-SQL xp_proxiedmetadata unicode vulnerable function attempt (sql.rules) 8524 <-> Enabled <-> MS-SQL/SMB xp_proxiedmetadata unicode vulnerable function attempt (sql.rules) 8525 <-> Enabled <-> MS-SQL xp_proxiedmetadata vulnerable function attempt (sql.rules) 8526 <-> Enabled <-> MS-SQL xp_SetSQLSecurity unicode vulnerable function attempt (sql.rules) 8527 <-> Enabled <-> MS-SQL/SMB xp_SetSQLSecurity unicode vulnerable function attempt (sql.rules) 8528 <-> Enabled <-> MS-SQL xp_SetSQLSecurity vulnerable function attempt (sql.rules) 8529 <-> Enabled <-> MS-SQL xp_showcolv unicode vulnerable function attempt (sql.rules) 8530 <-> Enabled <-> MS-SQL/SMB xp_showcolv unicode vulnerable function attempt (sql.rules) 8531 <-> Enabled <-> MS-SQL xp_showcolv vulnerable function attempt (sql.rules) 8532 <-> Enabled <-> MS-SQL xp_sqlagent_monitor unicode vulnerable function attempt (sql.rules) 8533 <-> Enabled <-> MS-SQL xp_sqlagent_monitor vulnerable function attempt (sql.rules) 8534 <-> Enabled <-> MS-SQL/SMB xp_sqlagent_monitor unicode vulnerable function attempt (sql.rules) 8535 <-> Enabled <-> MS-SQL xp_sqlinventory unicode vulnerable function attempt (sql.rules) 8536 <-> Enabled <-> MS-SQL xp_sqlinventory vulnerable function attempt (sql.rules) 8537 <-> Enabled <-> MS-SQL/SMB xp_sqlinventory unicode vulnerable function attempt (sql.rules) 8538 <-> Enabled <-> MS-SQL xp_updatecolvbm unicode vulnerable function attempt (sql.rules) 8539 <-> Enabled <-> MS-SQL/SMB xp_updatecolvbm unicode vulnerable function attempt (sql.rules) 8540 <-> Enabled <-> MS-SQL xp_updatecolvbm vulnerable function attempt (sql.rules) 8541 <-> Enabled <-> ORACLE sdo_cs.transform_layer buffer overflow attempt (oracle.rules) 8542 <-> Disabled <-> SPYWARE-PUT Trackware deluxecommunications runtime detection - collect info (spyware-put.rules) 8543 <-> Disabled <-> SPYWARE-PUT Trackware deluxecommunications runtime detection - display popup ads (spyware-put.rules) 8544 <-> Disabled <-> SPYWARE-PUT Keylogger nicespy runtime detection - smtp (spyware-put.rules) 8545 <-> Disabled <-> SPYWARE-PUT Adware roogoo runtime detection - surfing monitor (spyware-put.rules) 8546 <-> Disabled <-> SPYWARE-PUT Adware roogoo runtime detection - show ads (spyware-put.rules) 8547 <-> Disabled <-> BACKDOOR zzmm 2.0 runtime detection - init connection (backdoor.rules) 8548 <-> Disabled <-> BACKDOOR zzmm 2.0 runtime detection - init connection (backdoor.rules) 8549 <-> Disabled <-> BACKDOOR zxshell runtime detection - setting information retrieve (backdoor.rules) 8550 <-> Enabled <-> ORACLE dbms_mview.register_mview buffer overflow attempt (oracle.rules) 8551 <-> Enabled <-> ORACLE dbms_mview.unregister_mview buffer overflow attempt (oracle.rules) 8552 <-> Enabled <-> NETBIOS SMB-DS IActivation unicode little endian bind attempt (netbios.rules) 8553 <-> Enabled <-> NETBIOS SMB-DS IActivation WriteAndX unicode bind attempt (netbios.rules) 8554 <-> Enabled <-> NETBIOS SMB IActivation bind attempt (netbios.rules) 8555 <-> Enabled <-> NETBIOS SMB IActivation WriteAndX unicode little endian alter context attempt (netbios.rules) 8556 <-> Enabled <-> NETBIOS SMB-DS IActivation little endian alter context attempt (netbios.rules) 8557 <-> Enabled <-> NETBIOS SMB-DS IActivation WriteAndX little endian alter context attempt (netbios.rules) 8558 <-> Enabled <-> NETBIOS SMB-DS IActivation unicode little endian alter context attempt (netbios.rules) 8559 <-> Enabled <-> NETBIOS SMB-DS IActivation WriteAndX unicode alter context attempt (netbios.rules) 8560 <-> Enabled <-> NETBIOS SMB IActivation alter context attempt (netbios.rules) 8561 <-> Enabled <-> NETBIOS SMB IActivation WriteAndX bind attempt (netbios.rules) 8562 <-> Enabled <-> NETBIOS SMB IActivation unicode bind attempt (netbios.rules) 8563 <-> Enabled <-> NETBIOS SMB IActivation WriteAndX unicode bind attempt (netbios.rules) 8564 <-> Enabled <-> NETBIOS SMB-DS IActivation bind attempt (netbios.rules) 8565 <-> Enabled <-> NETBIOS SMB-DS IActivation WriteAndX bind attempt (netbios.rules) 8566 <-> Enabled <-> NETBIOS SMB-DS IActivation unicode bind attempt (netbios.rules) 8567 <-> Enabled <-> NETBIOS SMB IActivation WriteAndX alter context attempt (netbios.rules) 8568 <-> Enabled <-> NETBIOS SMB IActivation unicode andx alter context attempt (netbios.rules) 8569 <-> Enabled <-> NETBIOS SMB IActivation WriteAndX unicode andx alter context attempt (netbios.rules) 8570 <-> Enabled <-> NETBIOS SMB-DS IActivation andx alter context attempt (netbios.rules) 8571 <-> Enabled <-> NETBIOS SMB-DS IActivation WriteAndX andx alter context attempt (netbios.rules) 8572 <-> Enabled <-> NETBIOS SMB-DS IActivation unicode andx alter context attempt (netbios.rules) 8573 <-> Enabled <-> NETBIOS SMB-DS IActivation WriteAndX unicode little endian andx alter context attempt (netbios.rules) 8574 <-> Enabled <-> NETBIOS SMB IActivation little endian andx alter context attempt (netbios.rules) 8575 <-> Enabled <-> NETBIOS SMB IActivation WriteAndX little endian andx alter context attempt (netbios.rules) 8576 <-> Enabled <-> NETBIOS SMB IActivation unicode little endian andx alter context attempt (netbios.rules) 8577 <-> Enabled <-> NETBIOS SMB-DS IActivation WriteAndX unicode little endian andx bind attempt (netbios.rules) 8578 <-> Enabled <-> NETBIOS SMB IActivation little endian andx bind attempt (netbios.rules) 8579 <-> Enabled <-> NETBIOS SMB IActivation WriteAndX little endian andx bind attempt (netbios.rules) 8580 <-> Enabled <-> NETBIOS SMB IActivation unicode little endian andx bind attempt (netbios.rules) 8581 <-> Enabled <-> NETBIOS SMB IActivation WriteAndX unicode little endian andx bind attempt (netbios.rules) 8582 <-> Enabled <-> NETBIOS SMB-DS IActivation little endian andx bind attempt (netbios.rules) 8583 <-> Enabled <-> NETBIOS SMB-DS IActivation WriteAndX little endian andx bind attempt (netbios.rules) 8584 <-> Enabled <-> NETBIOS SMB-DS IActivation unicode little endian andx bind attempt (netbios.rules) 8585 <-> Enabled <-> NETBIOS SMB-DS IActivation WriteAndX unicode andx bind attempt (netbios.rules) 8586 <-> Enabled <-> NETBIOS SMB IActivation andx bind attempt (netbios.rules) 8587 <-> Enabled <-> NETBIOS SMB IActivation WriteAndX unicode little endian andx alter context attempt (netbios.rules) 8588 <-> Enabled <-> NETBIOS SMB-DS IActivation little endian andx alter context attempt (netbios.rules) 8589 <-> Enabled <-> NETBIOS SMB-DS IActivation WriteAndX little endian andx alter context attempt (netbios.rules) 8590 <-> Enabled <-> NETBIOS SMB-DS IActivation unicode little endian andx alter context attempt (netbios.rules) 8591 <-> Enabled <-> NETBIOS SMB-DS IActivation WriteAndX unicode andx alter context attempt (netbios.rules) 8592 <-> Enabled <-> NETBIOS SMB IActivation andx alter context attempt (netbios.rules) 8593 <-> Enabled <-> NETBIOS SMB IActivation WriteAndX andx bind attempt (netbios.rules) 8594 <-> Enabled <-> NETBIOS SMB IActivation unicode andx bind attempt (netbios.rules) 8595 <-> Enabled <-> NETBIOS SMB IActivation WriteAndX unicode andx bind attempt (netbios.rules) 8596 <-> Enabled <-> NETBIOS SMB-DS IActivation andx bind attempt (netbios.rules) 8597 <-> Enabled <-> NETBIOS SMB-DS IActivation WriteAndX andx bind attempt (netbios.rules) 8598 <-> Enabled <-> NETBIOS SMB-DS IActivation unicode andx bind attempt (netbios.rules) 8599 <-> Enabled <-> NETBIOS SMB IActivation WriteAndX andx alter context attempt (netbios.rules) 8600 <-> Disabled <-> NETBIOS DCERPC NCACN-HTTP IActivation alter context attempt (netbios.rules) 8601 <-> Enabled <-> NETBIOS DCERPC NCACN-IP-TCP IActivation alter context attempt (netbios.rules) 8602 <-> Disabled <-> NETBIOS DCERPC NCACN-HTTP IActivation little endian alter context attempt (netbios.rules) 8603 <-> Enabled <-> NETBIOS DCERPC NCACN-IP-TCP IActivation little endian alter context attempt (netbios.rules) 8604 <-> Disabled <-> NETBIOS DCERPC NCACN-HTTP IActivation bind attempt (netbios.rules) 8605 <-> Enabled <-> NETBIOS DCERPC NCACN-IP-TCP IActivation bind attempt (netbios.rules) 8606 <-> Disabled <-> NETBIOS DCERPC NCACN-HTTP IActivation little endian bind attempt (netbios.rules) 8607 <-> Enabled <-> NETBIOS DCERPC NCACN-IP-TCP IActivation little endian bind attempt (netbios.rules) 8608 <-> Enabled <-> NETBIOS SMB v4 IActivation remoteactivation little endian overflow attempt (netbios.rules) 8609 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation overflow attempt (netbios.rules) 8610 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation unicode overflow attempt (netbios.rules) 8611 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation little endian overflow attempt (netbios.rules) 8612 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX unicode little endian overflow attempt (netbios.rules) 8613 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation WriteAndX unicode overflow attempt (netbios.rules) 8614 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation WriteAndX overflow attempt (netbios.rules) 8615 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation unicode overflow attempt (netbios.rules) 8616 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX unicode overflow attempt (netbios.rules) 8617 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation overflow attempt (netbios.rules) 8618 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX overflow attempt (netbios.rules) 8619 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation little endian object call overflow attempt (netbios.rules) 8620 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation WriteAndX unicode little endian object call overflow attempt (netbios.rules) 8621 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation unicode little endian object call overflow attempt (netbios.rules) 8622 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX little endian object call overflow attempt (netbios.rules) 8623 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation WriteAndX little endian object call overflow attempt (netbios.rules) 8624 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation unicode little endian object call overflow attempt (netbios.rules) 8625 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation object call overflow attempt (netbios.rules) 8626 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation unicode object call overflow attempt (netbios.rules) 8627 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation little endian object call overflow attempt (netbios.rules) 8628 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX unicode little endian object call overflow attempt (netbios.rules) 8629 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation WriteAndX unicode object call overflow attempt (netbios.rules) 8630 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation WriteAndX object call overflow attempt (netbios.rules) 8631 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation unicode object call overflow attempt (netbios.rules) 8632 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX unicode object call overflow attempt (netbios.rules) 8633 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation object call overflow attempt (netbios.rules) 8634 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX object call overflow attempt (netbios.rules) 8635 <-> Enabled <-> NETBIOS SMB-DS v4 IActivation remoteactivation WriteAndX little endian overflow attempt (netbios.rules) 8636 <-> Enabled <-> NETBIOS SMB v4 IActivation remoteactivation WriteAndX little endian overflow attempt (netbios.rules) 8637 <-> Enabled <-> NETBIOS SMB-DS v4 IActivation remoteactivation little endian overflow attempt (netbios.rules) 8638 <-> Enabled <-> NETBIOS SMB-DS v4 IActivation remoteactivation WriteAndX unicode little endian overflow attempt (netbios.rules) 8639 <-> Enabled <-> NETBIOS SMB v4 IActivation remoteactivation WriteAndX unicode overflow attempt (netbios.rules) 8640 <-> Enabled <-> NETBIOS SMB-DS v4 IActivation remoteactivation unicode andx overflow attempt (netbios.rules) 8641 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation unicode little endian andx overflow attempt (netbios.rules) 8642 <-> Enabled <-> NETBIOS SMB-DS v4 IActivation remoteactivation andx overflow attempt (netbios.rules) 8643 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation WriteAndX unicode little endian andx overflow attempt (netbios.rules) 8644 <-> Enabled <-> NETBIOS SMB v4 IActivation remoteactivation andx overflow attempt (netbios.rules) 8645 <-> Enabled <-> NETBIOS SMB v4 IActivation remoteactivation WriteAndX unicode little endian andx overflow attempt (netbios.rules) 8646 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation unicode little endian andx overflow attempt (netbios.rules) 8647 <-> Enabled <-> NETBIOS SMB-DS v4 IActivation remoteactivation WriteAndX andx overflow attempt (netbios.rules) 8648 <-> Enabled <-> NETBIOS SMB-DS v4 IActivation remoteactivation WriteAndX unicode andx overflow attempt (netbios.rules) 8649 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation little endian andx overflow attempt (netbios.rules) 8650 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX little endian andx overflow attempt (netbios.rules) 8651 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation WriteAndX little endian andx overflow attempt (netbios.rules) 8652 <-> Enabled <-> NETBIOS SMB v4 IActivation remoteactivation unicode little endian andx overflow attempt (netbios.rules) 8653 <-> Enabled <-> NETBIOS SMB-DS v4 IActivation remoteactivation unicode little endian andx overflow attempt (netbios.rules) 8654 <-> Enabled <-> NETBIOS SMB v4 IActivation remoteactivation WriteAndX andx overflow attempt (netbios.rules) 8655 <-> Enabled <-> NETBIOS SMB v4 IActivation remoteactivation unicode andx overflow attempt (netbios.rules) 8656 <-> Enabled <-> NETBIOS SMB v4 IActivation remoteactivation little endian andx overflow attempt (netbios.rules) 8657 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation andx overflow attempt (netbios.rules) 8658 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation unicode andx overflow attempt (netbios.rules) 8659 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation little endian andx overflow attempt (netbios.rules) 8660 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX unicode little endian andx overflow attempt (netbios.rules) 8661 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation WriteAndX unicode andx overflow attempt (netbios.rules) 8662 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation WriteAndX andx overflow attempt (netbios.rules) 8663 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation unicode andx overflow attempt (netbios.rules) 8664 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX unicode andx overflow attempt (netbios.rules) 8665 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation andx overflow attempt (netbios.rules) 8666 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX andx overflow attempt (netbios.rules) 8667 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation little endian andx object call overflow attempt (netbios.rules) 8668 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation WriteAndX unicode little endian andx object call overflow attempt (netbios.rules) 8669 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation unicode little endian andx object call overflow attempt (netbios.rules) 8670 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX little endian andx object call overflow attempt (netbios.rules) 8671 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation WriteAndX little endian andx object call overflow attempt (netbios.rules) 8672 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation unicode little endian andx object call overflow attempt (netbios.rules) 8673 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation andx object call overflow attempt (netbios.rules) 8674 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation unicode andx object call overflow attempt (netbios.rules) 8675 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation little endian andx object call overflow attempt (netbios.rules) 8676 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX unicode little endian andx object call overflow attempt (netbios.rules) 8677 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation WriteAndX unicode andx object call overflow attempt (netbios.rules) 8678 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation WriteAndX andx object call overflow attempt (netbios.rules) 8679 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation unicode andx object call overflow attempt (netbios.rules) 8680 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX unicode andx object call overflow attempt (netbios.rules) 8681 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation andx object call overflow attempt (netbios.rules) 8682 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX andx object call overflow attempt (netbios.rules) 8683 <-> Enabled <-> NETBIOS SMB-DS v4 IActivation remoteactivation WriteAndX little endian andx overflow attempt (netbios.rules) 8684 <-> Enabled <-> NETBIOS SMB v4 IActivation remoteactivation WriteAndX little endian andx overflow attempt (netbios.rules) 8685 <-> Enabled <-> NETBIOS SMB-DS v4 IActivation remoteactivation little endian andx overflow attempt (netbios.rules) 8686 <-> Enabled <-> NETBIOS SMB-DS v4 IActivation remoteactivation WriteAndX unicode little endian andx overflow attempt (netbios.rules) 8687 <-> Enabled <-> NETBIOS SMB v4 IActivation remoteactivation WriteAndX unicode andx overflow attempt (netbios.rules) 8688 <-> Disabled <-> NETBIOS DCERPC NCACN-HTTP v4 IActivation remoteactivation little endian overflow attempt (netbios.rules) 8689 <-> Disabled <-> NETBIOS DCERPC NCACN-HTTP IActivation remoteactivation little endian overflow attempt (netbios.rules) 8690 <-> Enabled <-> NETBIOS DCERPC NCACN-IP-TCP IActivation remoteactivation little endian overflow attempt (netbios.rules) 8691 <-> Disabled <-> NETBIOS DCERPC NCACN-HTTP v4 IActivation remoteactivation overflow attempt (netbios.rules) 8692 <-> Enabled <-> NETBIOS DCERPC NCACN-IP-TCP v4 IActivation remoteactivation overflow attempt (netbios.rules) 8693 <-> Disabled <-> NETBIOS DCERPC NCACN-HTTP IActivation remoteactivation overflow attempt (netbios.rules) 8694 <-> Enabled <-> NETBIOS DCERPC NCACN-IP-TCP IActivation remoteactivation overflow attempt (netbios.rules) 8695 <-> Enabled <-> NETBIOS DCERPC NCACN-IP-TCP v4 IActivation remoteactivation little endian overflow attempt (netbios.rules) 8696 <-> Disabled <-> NETBIOS DCERPC NCACN-HTTP IActivation remoteactivation little endian object call overflow attempt (netbios.rules) 8697 <-> Enabled <-> NETBIOS DCERPC NCACN-IP-TCP IActivation remoteactivation little endian object call overflow attempt (netbios.rules) 8698 <-> Disabled <-> NETBIOS DCERPC NCACN-HTTP IActivation remoteactivation object call overflow attempt (netbios.rules) 8699 <-> Enabled <-> NETBIOS DCERPC NCACN-IP-TCP IActivation remoteactivation object call overflow attempt (netbios.rules) 8700 <-> Enabled <-> WEB-IIS ASP.NET 2.0 cross-site scripting attempt (web-iis.rules) 8701 <-> Disabled <-> WEB-MISC IceCast header buffer overflow attempt (web-misc.rules) 8702 <-> Enabled <-> EXPLOIT IceCast header buffer overflow attempt (exploit.rules) 8703 <-> Enabled <-> EXPLOIT IceCast header buffer overflow attempt (exploit.rules) 8704 <-> Disabled <-> SMTP YPOPS Banner (smtp.rules) 8705 <-> Disabled <-> SMTP YPOPS buffer overflow attempt (smtp.rules) 8706 <-> Disabled <-> EXPLOIT YPOPS buffer overflow attempt (exploit.rules) 8707 <-> Enabled <-> FTP WZD-FTPD SITE arbitrary command execution attempt (ftp.rules) 8708 <-> Enabled <-> WEB-PHP Wordpress cache_lastpostdate code injection attempt (web-php.rules) 8709 <-> Enabled <-> DNS Windows NAT helper components tcp denail of service attempt (dns.rules) 8710 <-> Enabled <-> DNS Windows NAT helper components udp denial of service attempt (dns.rules) 8711 <-> Disabled <-> WEB-ATTACK Novell eDirectory HTTP redirection buffer overflow attempt (web-misc.rules) 8712 <-> Enabled <-> WEB-PHP cacti graph_image arbitrary command execution attempt (web-php.rules) 8713 <-> Enabled <-> WEB-PHP cacti graph_image SQL injection attempt (web-php.rules) 8714 <-> Enabled <-> WEB-PHP cacti graph_image SQL injection attempt (web-php.rules) 8715 <-> Enabled <-> WEB-PHP cacti graph_image SQL injection attempt (web-php.rules) 8716 <-> Enabled <-> WEB-PHP cacti graph_image SQL injection attempt (web-php.rules) 8717 <-> Disabled <-> WEB-CLIENT VsaIDE.DTE ActiveX CLSID access (web-client.rules) 8718 <-> Disabled <-> WEB-CLIENT VsaIDE.DTE ActiveX CLSID unicode access (web-client.rules) 8719 <-> Disabled <-> WEB-CLIENT VisualStudio.DTE.8.0 ActiveX CLSID access (web-client.rules) 8720 <-> Disabled <-> WEB-CLIENT VisualStudio.DTE.8.0 ActiveX CLSID unicode access (web-client.rules) 8721 <-> Disabled <-> WEB-CLIENT Outlook Data Object ActiveX CLSID access (web-client.rules) 8722 <-> Disabled <-> WEB-CLIENT Outlook Data Object ActiveX CLSID unicode access (web-client.rules) 8723 <-> Disabled <-> WEB-CLIENT Microsoft Office Data Source Control 11.0 ActiveX CLSID access (web-client.rules) 8724 <-> Disabled <-> WEB-CLIENT Microsoft Office Data Source Control 11.0 ActiveX CLSID unicode access (web-client.rules) 8725 <-> Disabled <-> WEB-CLIENT System Monitor ActiveX CLSID access (web-client.rules) 8726 <-> Disabled <-> WEB-CLIENT System Monitor ActiveX CLSID unicode access (web-client.rules) 8727 <-> Disabled <-> WEB-CLIENT XMLHTTP 4.0 ActiveX CLSID access (web-client.rules) 8728 <-> Disabled <-> WEB-CLIENT XMLHTTP 4.0 ActiveX CLSID unicode access (web-client.rules) Updated rules: 282 <-> Disabled <-> DELETED DOS arkiea backup (deleted.rules) 500 <-> Disabled <-> MISC source route lssr (misc.rules) 501 <-> Disabled <-> MISC source route lssre (misc.rules) 502 <-> Disabled <-> MISC source route ssrr (misc.rules) 523 <-> Disabled <-> BAD-TRAFFIC ip reserved bit set (bad-traffic.rules) 528 <-> Disabled <-> BAD-TRAFFIC loopback traffic (bad-traffic.rules) 619 <-> Disabled <-> SCAN cybercop os probe (scan.rules) 621 <-> Disabled <-> SCAN FIN (scan.rules) 623 <-> Disabled <-> SCAN NULL (scan.rules) 624 <-> Disabled <-> SCAN SYN FIN (scan.rules) 625 <-> Disabled <-> SCAN XMAS (scan.rules) 674 <-> Disabled <-> DELETED MS-SQL xp_displayparamstmt possible buffer overflow (deleted.rules) 675 <-> Disabled <-> DELETED MS-SQL xp_setsqlsecurity possible buffer overflow (deleted.rules) 682 <-> Disabled <-> DELETED MS-SQL xp_enumresultset possible buffer overflow (deleted.rules) 690 <-> Disabled <-> DELETED MS-SQL/SMB xp_printstatements possible buffer overflow (deleted.rules) 696 <-> Disabled <-> DELETED MS-SQL/SMB xp_showcolv possible buffer overflow (deleted.rules) 697 <-> Disabled <-> DELETED MS-SQL/SMB xp_peekqueue possible buffer overflow (deleted.rules) 698 <-> Disabled <-> DELETED MS-SQL/SMB xp_proxiedmetadata possible buffer overflow (deleted.rules) 699 <-> Disabled <-> DELETED MS-SQL xp_printstatements possible buffer overflow (deleted.rules) 700 <-> Disabled <-> DELETED MS-SQL/SMB xp_updatecolvbm possible buffer overflow (deleted.rules) 701 <-> Disabled <-> DELETED MS-SQL xp_updatecolvbm possible buffer overflow (deleted.rules) 702 <-> Disabled <-> DELETED MS-SQL/SMB xp_displayparamstmt possible buffer overflow (deleted.rules) 703 <-> Disabled <-> DELETED MS-SQL/SMB xp_setsqlsecurity possible buffer overflow (deleted.rules) 705 <-> Disabled <-> DELETED MS-SQL xp_showcolv possible buffer overflow (deleted.rules) 706 <-> Disabled <-> DELETED MS-SQL xp_peekqueue possible buffer overflow (deleted.rules) 707 <-> Disabled <-> DELETED MS-SQL xp_proxiedmetadata possible buffer overflow (deleted.rules) 708 <-> Disabled <-> DELETED MS-SQL/SMB xp_enumresultset possible buffer overflow (deleted.rules) 809 <-> Disabled <-> WEB-CGI whois_raw.cgi arbitrary command execution attempt (web-cgi.rules) 1143 <-> Disabled <-> DELETED WEB-MISC ///cgi-bin access (deleted.rules) 1144 <-> Disabled <-> DELETED WEB-MISC /cgi-bin/// access (deleted.rules) 1228 <-> Disabled <-> SCAN nmap XMAS (scan.rules) 1321 <-> Disabled <-> BAD-TRAFFIC 0 ttl (bad-traffic.rules) 1399 <-> Disabled <-> WEB-PHP PHP-Nuke remote file include attempt (web-php.rules) 1431 <-> Disabled <-> BAD-TRAFFIC syn to multicast address (bad-traffic.rules) 1621 <-> Enabled <-> FTP CMD overflow attempt (ftp.rules) 1624 <-> Enabled <-> FTP PWD overflow attempt (ftp.rules) 1627 <-> Disabled <-> BAD-TRAFFIC Unassigned/Reserved IP protocol (bad-traffic.rules) 1839 <-> Disabled <-> WEB-MISC mailman cross site scripting attempt (web-misc.rules) 2174 <-> Disabled <-> NETBIOS SMB winreg little endian bind attempt (netbios.rules) 2175 <-> Disabled <-> NETBIOS SMB winreg WriteAndX little endian bind attempt (netbios.rules) 2401 <-> Disabled <-> NETBIOS SMB Session Setup andx username overflow attempt (netbios.rules) 2402 <-> Disabled <-> NETBIOS SMB-DS Session Setup andx username overflow attempt (netbios.rules) 2403 <-> Disabled <-> NETBIOS SMB Session Setup unicode username overflow attempt (netbios.rules) 2404 <-> Disabled <-> NETBIOS SMB-DS Session Setup unicode andx username overflow attempt (netbios.rules) 2437 <-> Disabled <-> WEB-CLIENT RealPlayer arbitrary javascript command attempt (web-client.rules) 2476 <-> Disabled <-> NETBIOS SMB winreg unicode little endian bind attempt (netbios.rules) 2477 <-> Disabled <-> NETBIOS SMB winreg WriteAndX unicode little endian bind attempt (netbios.rules) 2478 <-> Disabled <-> NETBIOS SMB winreg WriteAndX alter context attempt (netbios.rules) 2479 <-> Disabled <-> NETBIOS SMB winreg WriteAndX unicode alter context attempt (netbios.rules) 2480 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown unicode little endian attempt (netbios.rules) 2481 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX unicode attempt (netbios.rules) 2482 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX little endian attempt (netbios.rules) 2483 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown unicode little endian attempt (netbios.rules) 2500 <-> Disabled <-> DELETED POP3 SSLv3 invalid data version attempt (deleted.rules) 2532 <-> Disabled <-> DELETED POP3 SSLv3 Client_Hello request (deleted.rules) 2533 <-> Disabled <-> DELETED POP3 SSLv3 Server_Hello request (deleted.rules) 2534 <-> Disabled <-> DELETED POP3 SSLv3 invalid Client_Hello attempt (deleted.rules) 2580 <-> Disabled <-> WEB-MISC server negative Content-Length attempt (web-misc.rules) 2650 <-> Enabled <-> ORACLE user name buffer overflow attempt (oracle.rules) 2940 <-> Disabled <-> NETBIOS SMB winreg alter context attempt (netbios.rules) 2941 <-> Disabled <-> NETBIOS SMB winreg unicode alter context attempt (netbios.rules) 2942 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX attempt (netbios.rules) 2943 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown unicode attempt (netbios.rules) 2944 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown little endian attempt (netbios.rules) 2945 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown attempt (netbios.rules) 2984 <-> Disabled <-> NETBIOS SMB-DS winreg little endian bind attempt (netbios.rules) 2985 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX little endian bind attempt (netbios.rules) 2986 <-> Disabled <-> NETBIOS SMB-DS winreg unicode little endian bind attempt (netbios.rules) 2987 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX unicode little endian bind attempt (netbios.rules) 2988 <-> Disabled <-> NETBIOS SMB-DS winreg alter context attempt (netbios.rules) 2989 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX alter context attempt (netbios.rules) 2990 <-> Disabled <-> NETBIOS SMB-DS winreg unicode alter context attempt (netbios.rules) 2991 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX unicode alter context attempt (netbios.rules) 2992 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX unicode little endian attempt (netbios.rules) 2993 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown little endian attempt (netbios.rules) 2994 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX attempt (netbios.rules) 2995 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown unicode attempt (netbios.rules) 2996 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown unicode little endian attempt (netbios.rules) 2997 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown WriteAndX unicode little endian attempt (netbios.rules) 2998 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown WriteAndX little endian attempt (netbios.rules) 2999 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown unicode attempt (netbios.rules) 3202 <-> Disabled <-> NETBIOS SMB winreg little endian alter context attempt (netbios.rules) 3203 <-> Disabled <-> NETBIOS SMB winreg WriteAndX little endian alter context attempt (netbios.rules) 3204 <-> Disabled <-> NETBIOS SMB winreg unicode little endian alter context attempt (netbios.rules) 3205 <-> Disabled <-> NETBIOS SMB winreg WriteAndX unicode little endian alter context attempt (netbios.rules) 3206 <-> Disabled <-> NETBIOS SMB-DS winreg little endian alter context attempt (netbios.rules) 3207 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX little endian alter context attempt (netbios.rules) 3208 <-> Disabled <-> NETBIOS SMB-DS winreg unicode little endian alter context attempt (netbios.rules) 3209 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX unicode little endian alter context attempt (netbios.rules) 3210 <-> Disabled <-> NETBIOS SMB winreg bind attempt (netbios.rules) 3211 <-> Disabled <-> NETBIOS SMB winreg unicode bind attempt (netbios.rules) 3212 <-> Disabled <-> NETBIOS SMB winreg WriteAndX bind attempt (netbios.rules) 3213 <-> Disabled <-> NETBIOS SMB winreg WriteAndX unicode bind attempt (netbios.rules) 3214 <-> Disabled <-> NETBIOS SMB-DS winreg bind attempt (netbios.rules) 3215 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX bind attempt (netbios.rules) 3216 <-> Disabled <-> NETBIOS SMB-DS winreg unicode bind attempt (netbios.rules) 3217 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX unicode bind attempt (netbios.rules) 3218 <-> Disabled <-> NETBIOS SMB winreg OpenKey WriteAndX unicode overflow attempt (netbios.rules) 3219 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey WriteAndX little endian overflow attempt (netbios.rules) 3220 <-> Disabled <-> NETBIOS SMB winreg OpenKey overflow attempt (netbios.rules) 3221 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey WriteAndX unicode little endian overflow attempt (netbios.rules) 3222 <-> Disabled <-> NETBIOS SMB winreg OpenKey WriteAndX little endian overflow attempt (netbios.rules) 3223 <-> Disabled <-> NETBIOS SMB winreg OpenKey little endian overflow attempt (netbios.rules) 3224 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey little endian overflow attempt (netbios.rules) 3225 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey unicode overflow attempt (netbios.rules) 3226 <-> Disabled <-> NETBIOS SMB winreg OpenKey WriteAndX unicode little endian overflow attempt (netbios.rules) 3227 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey WriteAndX unicode overflow attempt (netbios.rules) 3228 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey unicode little endian overflow attempt (netbios.rules) 3229 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey WriteAndX overflow attempt (netbios.rules) 3230 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey unicode overflow attempt (netbios.rules) 3231 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey unicode little endian overflow attempt (netbios.rules) 3232 <-> Disabled <-> NETBIOS SMB winreg OpenKey WriteAndX overflow attempt (netbios.rules) 3233 <-> Disabled <-> NETBIOS SMB winreg OpenKey unicode little endian overflow attempt (netbios.rules) 3377 <-> Enabled <-> NETBIOS SMB IActivation unicode alter context attempt (netbios.rules) 3378 <-> Enabled <-> NETBIOS SMB IActivation WriteAndX unicode alter context attempt (netbios.rules) 3379 <-> Enabled <-> NETBIOS SMB-DS IActivation alter context attempt (netbios.rules) 3380 <-> Enabled <-> NETBIOS SMB-DS IActivation WriteAndX alter context attempt (netbios.rules) 3381 <-> Enabled <-> NETBIOS SMB-DS IActivation unicode alter context attempt (netbios.rules) 3382 <-> Enabled <-> NETBIOS SMB-DS IActivation WriteAndX unicode little endian alter context attempt (netbios.rules) 3383 <-> Enabled <-> NETBIOS SMB IActivation little endian alter context attempt (netbios.rules) 3384 <-> Enabled <-> NETBIOS SMB IActivation WriteAndX little endian alter context attempt (netbios.rules) 3385 <-> Enabled <-> NETBIOS SMB IActivation unicode little endian alter context attempt (netbios.rules) 3386 <-> Enabled <-> NETBIOS SMB-DS IActivation WriteAndX unicode little endian bind attempt (netbios.rules) 3387 <-> Enabled <-> NETBIOS SMB IActivation little endian bind attempt (netbios.rules) 3388 <-> Enabled <-> NETBIOS SMB IActivation WriteAndX little endian bind attempt (netbios.rules) 3389 <-> Enabled <-> NETBIOS SMB IActivation unicode little endian bind attempt (netbios.rules) 3390 <-> Enabled <-> NETBIOS SMB IActivation WriteAndX unicode little endian bind attempt (netbios.rules) 3391 <-> Enabled <-> NETBIOS SMB-DS IActivation little endian bind attempt (netbios.rules) 3392 <-> Enabled <-> NETBIOS SMB-DS IActivation WriteAndX little endian bind attempt (netbios.rules) 3409 <-> Enabled <-> NETBIOS SMB-DS v4 IActivation remoteactivation unicode overflow attempt (netbios.rules) 3410 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation unicode little endian overflow attempt (netbios.rules) 3411 <-> Enabled <-> NETBIOS SMB-DS v4 IActivation remoteactivation overflow attempt (netbios.rules) 3412 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation WriteAndX unicode little endian overflow attempt (netbios.rules) 3413 <-> Enabled <-> NETBIOS SMB v4 IActivation remoteactivation overflow attempt (netbios.rules) 3414 <-> Enabled <-> NETBIOS SMB v4 IActivation remoteactivation WriteAndX unicode little endian overflow attempt (netbios.rules) 3415 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation unicode little endian overflow attempt (netbios.rules) 3416 <-> Enabled <-> NETBIOS SMB-DS v4 IActivation remoteactivation WriteAndX overflow attempt (netbios.rules) 3417 <-> Enabled <-> NETBIOS SMB-DS v4 IActivation remoteactivation WriteAndX unicode overflow attempt (netbios.rules) 3418 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation little endian overflow attempt (netbios.rules) 3419 <-> Enabled <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX little endian overflow attempt (netbios.rules) 3420 <-> Enabled <-> NETBIOS SMB IActivation remoteactivation WriteAndX little endian overflow attempt (netbios.rules) 3421 <-> Enabled <-> NETBIOS SMB v4 IActivation remoteactivation unicode little endian overflow attempt (netbios.rules) 3422 <-> Enabled <-> NETBIOS SMB-DS v4 IActivation remoteactivation unicode little endian overflow attempt (netbios.rules) 3423 <-> Enabled <-> NETBIOS SMB v4 IActivation remoteactivation WriteAndX overflow attempt (netbios.rules) 3424 <-> Enabled <-> NETBIOS SMB v4 IActivation remoteactivation unicode overflow attempt (netbios.rules) 3457 <-> Enabled <-> EXPLOIT Arkeia backup client type 77 overflow attempt (exploit.rules) 3473 <-> Disabled <-> WEB-CLIENT RealPlayer SMIL file overflow attempt (web-client.rules) 3505 <-> Disabled <-> DELETED POP3 SSLv2 Client_Hello request (deleted.rules) 3506 <-> Disabled <-> DELETED POP3 SSLv2 Client_Hello with pad request (deleted.rules) 3507 <-> Disabled <-> DELETED POP3 TLSv1 Client_Hello request (deleted.rules) 3508 <-> Disabled <-> DELETED POP3 TLSv1 Client_Hello via SSLv2 handshake request (deleted.rules) 3509 <-> Disabled <-> DELETED POP3 SSLv2 Server_Hello request (deleted.rules) 3510 <-> Disabled <-> DELETED POP3 TLSv1 Server_Hello request (deleted.rules) 3556 <-> Disabled <-> NETBIOS DCERPC mqqm bind attempt (netbios.rules) 3557 <-> Disabled <-> NETBIOS DCERPC mqqm little endian bind attempt (netbios.rules) 3558 <-> Disabled <-> NETBIOS SMB mqqm WriteAndX andx bind attempt (netbios.rules) 3559 <-> Disabled <-> NETBIOS SMB mqqm WriteAndX bind attempt (netbios.rules) 3560 <-> Disabled <-> NETBIOS SMB mqqm WriteAndX little endian andx bind attempt (netbios.rules) 3561 <-> Disabled <-> NETBIOS SMB mqqm WriteAndX little endian bind attempt (netbios.rules) 3562 <-> Disabled <-> NETBIOS SMB mqqm WriteAndX unicode andx bind attempt (netbios.rules) 3563 <-> Disabled <-> NETBIOS SMB mqqm WriteAndX unicode bind attempt (netbios.rules) 3564 <-> Disabled <-> NETBIOS SMB mqqm WriteAndX unicode little endian andx bind attempt (netbios.rules) 3565 <-> Disabled <-> NETBIOS SMB mqqm WriteAndX unicode little endian bind attempt (netbios.rules) 3566 <-> Disabled <-> NETBIOS SMB mqqm andx bind attempt (netbios.rules) 3567 <-> Disabled <-> NETBIOS SMB mqqm bind attempt (netbios.rules) 3568 <-> Disabled <-> NETBIOS SMB mqqm little endian andx bind attempt (netbios.rules) 3569 <-> Disabled <-> NETBIOS SMB mqqm little endian bind attempt (netbios.rules) 3570 <-> Disabled <-> NETBIOS SMB mqqm unicode andx bind attempt (netbios.rules) 3571 <-> Disabled <-> NETBIOS SMB mqqm unicode bind attempt (netbios.rules) 3572 <-> Disabled <-> NETBIOS SMB mqqm unicode little endian andx bind attempt (netbios.rules) 3573 <-> Disabled <-> NETBIOS SMB mqqm unicode little endian bind attempt (netbios.rules) 3574 <-> Disabled <-> NETBIOS SMB-DS mqqm WriteAndX andx bind attempt (netbios.rules) 3575 <-> Disabled <-> NETBIOS SMB-DS mqqm WriteAndX bind attempt (netbios.rules) 3576 <-> Disabled <-> NETBIOS SMB-DS mqqm WriteAndX little endian andx bind attempt (netbios.rules) 3577 <-> Disabled <-> NETBIOS SMB-DS mqqm WriteAndX little endian bind attempt (netbios.rules) 3578 <-> Disabled <-> NETBIOS SMB-DS mqqm WriteAndX unicode andx bind attempt (netbios.rules) 3579 <-> Disabled <-> NETBIOS SMB-DS mqqm WriteAndX unicode bind attempt (netbios.rules) 3580 <-> Disabled <-> NETBIOS SMB-DS mqqm WriteAndX unicode little endian andx bind attempt (netbios.rules) 3581 <-> Disabled <-> NETBIOS SMB-DS mqqm WriteAndX unicode little endian bind attempt (netbios.rules) 3582 <-> Disabled <-> NETBIOS SMB-DS mqqm andx bind attempt (netbios.rules) 3583 <-> Disabled <-> NETBIOS SMB-DS mqqm bind attempt (netbios.rules) 3584 <-> Disabled <-> NETBIOS SMB-DS mqqm little endian andx bind attempt (netbios.rules) 3585 <-> Disabled <-> NETBIOS SMB-DS mqqm little endian bind attempt (netbios.rules) 3586 <-> Disabled <-> NETBIOS SMB-DS mqqm unicode andx bind attempt (netbios.rules) 3587 <-> Disabled <-> NETBIOS SMB-DS mqqm unicode bind attempt (netbios.rules) 3588 <-> Disabled <-> NETBIOS SMB-DS mqqm unicode little endian andx bind attempt (netbios.rules) 3589 <-> Disabled <-> NETBIOS SMB-DS mqqm unicode little endian bind attempt (netbios.rules) 3592 <-> Disabled <-> NETBIOS DCERPC mqqm QMDeleteObject little endian overflow attempt (netbios.rules) 3593 <-> Disabled <-> NETBIOS DCERPC mqqm QMDeleteObject overflow attempt (netbios.rules) 3594 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject WriteAndX andx overflow attempt (netbios.rules) 3595 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject WriteAndX little endian andx overflow attempt (netbios.rules) 3596 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject WriteAndX little endian overflow attempt (netbios.rules) 3597 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject WriteAndX overflow attempt (netbios.rules) 3598 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject WriteAndX unicode andx overflow attempt (netbios.rules) 3599 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject WriteAndX unicode little endian andx overflow attempt (netbios.rules) 3600 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject WriteAndX unicode little endian overflow attempt (netbios.rules) 3601 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject WriteAndX unicode overflow attempt (netbios.rules) 3602 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject andx overflow attempt (netbios.rules) 3603 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject little endian andx overflow attempt (netbios.rules) 3604 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject little endian overflow attempt (netbios.rules) 3605 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject overflow attempt (netbios.rules) 3606 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject unicode andx overflow attempt (netbios.rules) 3607 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject unicode little endian andx overflow attempt (netbios.rules) 3608 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject unicode little endian overflow attempt (netbios.rules) 3609 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject unicode overflow attempt (netbios.rules) 3610 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX andx overflow attempt (netbios.rules) 3611 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX little endian andx overflow attempt (netbios.rules) 3612 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX little endian overflow attempt (netbios.rules) 3613 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX overflow attempt (netbios.rules) 3614 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX unicode andx overflow attempt (netbios.rules) 3615 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX unicode little endian andx overflow attempt (netbios.rules) 3616 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX unicode little endian overflow attempt (netbios.rules) 3617 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX unicode overflow attempt (netbios.rules) 3618 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject andx overflow attempt (netbios.rules) 3619 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject little endian andx overflow attempt (netbios.rules) 3620 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject little endian overflow attempt (netbios.rules) 3621 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject overflow attempt (netbios.rules) 3622 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject unicode andx overflow attempt (netbios.rules) 3623 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject unicode little endian andx overflow attempt (netbios.rules) 3624 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject unicode little endian overflow attempt (netbios.rules) 3625 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject unicode overflow attempt (netbios.rules) 3639 <-> Disabled <-> NETBIOS SMB Trans andx data displacement null pointer DOS attempt (netbios.rules) 3640 <-> Disabled <-> NETBIOS SMB Trans data displacement null pointer DOS attempt (netbios.rules) 3641 <-> Disabled <-> NETBIOS SMB Trans unicode data displacement null pointer DOS attempt (netbios.rules) 3642 <-> Disabled <-> NETBIOS SMB Trans unicode andx data displacement null pointer DOS attempt (netbios.rules) 3643 <-> Disabled <-> NETBIOS SMB-DS Trans andx data displacement null pointer DOS attempt (netbios.rules) 3644 <-> Disabled <-> NETBIOS SMB-DS Trans data displacement null pointer DOS attempt (netbios.rules) 3645 <-> Disabled <-> NETBIOS SMB-DS Trans unicode data displacement null pointer DOS attempt (netbios.rules) 3646 <-> Disabled <-> NETBIOS SMB-DS Trans unicode andx data displacement null pointer DOS attempt (netbios.rules) 3647 <-> Disabled <-> NETBIOS-DG SMB Trans andx data displacement null pointer DOS attempt (netbios.rules) 3648 <-> Disabled <-> NETBIOS-DG SMB Trans data displacement null pointer DOS attempt (netbios.rules) 3649 <-> Disabled <-> NETBIOS-DG SMB Trans unicode data displacement null pointer DOS attempt (netbios.rules) 3650 <-> Disabled <-> NETBIOS-DG SMB Trans unicode andx data displacement null pointer DOS attempt (netbios.rules) 3683 <-> Disabled <-> WEB-CLIENT spoofed MIME-Type auto-execution attempt (web-client.rules) 3694 <-> Disabled <-> WEB-MISC Squid content length cache poisoning attempt (web-misc.rules) 4659 <-> Disabled <-> NETBIOS-DG SMB NT Trans NT SET SECURITY DESC SACL overflow attempt (netbios.rules) 4660 <-> Disabled <-> NETBIOS-DG SMB NT Trans NT SET SECURITY DESC andx SACL overflow attempt (netbios.rules) 4661 <-> Disabled <-> NETBIOS-DG SMB NT Trans NT SET SECURITY DESC unicode SACL overflow attempt (netbios.rules) 4662 <-> Disabled <-> NETBIOS-DG SMB NT Trans NT SET SECURITY DESC unicode andx SACL overflow attempt (netbios.rules) 4671 <-> Disabled <-> NETBIOS-DG SMB NT Trans NT SET SECURITY DESC DACL overflow attempt (netbios.rules) 4672 <-> Disabled <-> NETBIOS-DG SMB NT Trans NT SET SECURITY DESC andx DACL overflow attempt (netbios.rules) 4673 <-> Disabled <-> NETBIOS-DG SMB NT Trans NT SET SECURITY DESC unicode DACL overflow attempt (netbios.rules) 4674 <-> Disabled <-> NETBIOS-DG SMB NT Trans NT SET SECURITY DESC unicode andx DACL overflow attempt (netbios.rules) 4681 <-> Disabled <-> WEB-MISC Symantec admin interface client negative Content-Length attempt (web-misc.rules) 5549 <-> Disabled <-> NETBIOS SMB winreg andx alter context attempt (netbios.rules) 5550 <-> Disabled <-> NETBIOS SMB winreg unicode andx alter context attempt (netbios.rules) 5551 <-> Disabled <-> NETBIOS SMB winreg WriteAndX andx alter context attempt (netbios.rules) 5552 <-> Disabled <-> NETBIOS SMB winreg WriteAndX unicode andx alter context attempt (netbios.rules) 5553 <-> Disabled <-> NETBIOS SMB-DS winreg andx alter context attempt (netbios.rules) 5554 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX andx alter context attempt (netbios.rules) 5555 <-> Disabled <-> NETBIOS SMB-DS winreg unicode andx alter context attempt (netbios.rules) 5556 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX unicode andx alter context attempt (netbios.rules) 5557 <-> Disabled <-> NETBIOS SMB winreg little endian andx alter context attempt (netbios.rules) 5558 <-> Disabled <-> NETBIOS SMB winreg WriteAndX little endian andx alter context attempt (netbios.rules) 5559 <-> Disabled <-> NETBIOS SMB winreg unicode little endian andx alter context attempt (netbios.rules) 5560 <-> Disabled <-> NETBIOS SMB winreg WriteAndX unicode little endian andx alter context attempt (netbios.rules) 5561 <-> Disabled <-> NETBIOS SMB-DS winreg little endian andx alter context attempt (netbios.rules) 5562 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX little endian andx alter context attempt (netbios.rules) 5563 <-> Disabled <-> NETBIOS SMB-DS winreg unicode little endian andx alter context attempt (netbios.rules) 5564 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX unicode little endian andx alter context attempt (netbios.rules) 5565 <-> Disabled <-> NETBIOS SMB winreg andx bind attempt (netbios.rules) 5566 <-> Disabled <-> NETBIOS SMB winreg unicode andx bind attempt (netbios.rules) 5567 <-> Disabled <-> NETBIOS SMB winreg WriteAndX andx bind attempt (netbios.rules) 5568 <-> Disabled <-> NETBIOS SMB winreg WriteAndX unicode andx bind attempt (netbios.rules) 5569 <-> Disabled <-> NETBIOS SMB-DS winreg andx bind attempt (netbios.rules) 5570 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX andx bind attempt (netbios.rules) 5571 <-> Disabled <-> NETBIOS SMB-DS winreg unicode andx bind attempt (netbios.rules) 5572 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX unicode andx bind attempt (netbios.rules) 5573 <-> Disabled <-> NETBIOS SMB winreg little endian andx bind attempt (netbios.rules) 5574 <-> Disabled <-> NETBIOS SMB winreg WriteAndX little endian andx bind attempt (netbios.rules) 5575 <-> Disabled <-> NETBIOS SMB winreg unicode little endian andx bind attempt (netbios.rules) 5576 <-> Disabled <-> NETBIOS SMB winreg WriteAndX unicode little endian andx bind attempt (netbios.rules) 5577 <-> Disabled <-> NETBIOS SMB-DS winreg little endian andx bind attempt (netbios.rules) 5578 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX little endian andx bind attempt (netbios.rules) 5579 <-> Disabled <-> NETBIOS SMB-DS winreg unicode little endian andx bind attempt (netbios.rules) 5580 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX unicode little endian andx bind attempt (netbios.rules) 5581 <-> Disabled <-> NETBIOS SMB winreg OpenKey unicode overflow attempt (netbios.rules) 5582 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey overflow attempt (netbios.rules) 5583 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey WriteAndX overflow attempt (netbios.rules) 5584 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey WriteAndX unicode overflow attempt (netbios.rules) 5585 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey overflow attempt (netbios.rules) 5586 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey unicode overflow attempt (netbios.rules) 5587 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey overflow attempt (netbios.rules) 5588 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey WriteAndX unicode overflow attempt (netbios.rules) 5589 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey WriteAndX overflow attempt (netbios.rules) 5590 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey WriteAndX unicode little endian overflow attempt (netbios.rules) 5591 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey WriteAndX little endian overflow attempt (netbios.rules) 5592 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey WriteAndX unicode little endian overflow attempt (netbios.rules) 5593 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey little endian overflow attempt (netbios.rules) 5594 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey unicode little endian overflow attempt (netbios.rules) 5595 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey WriteAndX little endian overflow attempt (netbios.rules) 5596 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey little endian overflow attempt (netbios.rules) 5597 <-> Disabled <-> NETBIOS SMB winreg OpenKey WriteAndX unicode andx overflow attempt (netbios.rules) 5598 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey WriteAndX little endian andx overflow attempt (netbios.rules) 5599 <-> Disabled <-> NETBIOS SMB winreg OpenKey andx overflow attempt (netbios.rules) 5600 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey WriteAndX unicode little endian andx overflow attempt (netbios.rules) 5601 <-> Disabled <-> NETBIOS SMB winreg OpenKey WriteAndX little endian andx overflow attempt (netbios.rules) 5602 <-> Disabled <-> NETBIOS SMB winreg OpenKey little endian andx overflow attempt (netbios.rules) 5603 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey little endian andx overflow attempt (netbios.rules) 5604 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey unicode andx overflow attempt (netbios.rules) 5605 <-> Disabled <-> NETBIOS SMB winreg OpenKey WriteAndX unicode little endian andx overflow attempt (netbios.rules) 5606 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey WriteAndX unicode andx overflow attempt (netbios.rules) 5607 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey unicode little endian andx overflow attempt (netbios.rules) 5608 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey WriteAndX andx overflow attempt (netbios.rules) 5609 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey unicode andx overflow attempt (netbios.rules) 5610 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey unicode little endian andx overflow attempt (netbios.rules) 5611 <-> Disabled <-> NETBIOS SMB winreg OpenKey WriteAndX andx overflow attempt (netbios.rules) 5612 <-> Disabled <-> NETBIOS SMB winreg OpenKey unicode little endian andx overflow attempt (netbios.rules) 5613 <-> Disabled <-> NETBIOS SMB winreg OpenKey unicode andx overflow attempt (netbios.rules) 5614 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey andx overflow attempt (netbios.rules) 5615 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey WriteAndX andx overflow attempt (netbios.rules) 5616 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey WriteAndX unicode andx overflow attempt (netbios.rules) 5617 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey andx overflow attempt (netbios.rules) 5618 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey unicode andx overflow attempt (netbios.rules) 5619 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey andx overflow attempt (netbios.rules) 5620 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey WriteAndX unicode andx overflow attempt (netbios.rules) 5621 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey WriteAndX andx overflow attempt (netbios.rules) 5622 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey WriteAndX unicode little endian andx overflow attempt (netbios.rules) 5623 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey WriteAndX little endian andx overflow attempt (netbios.rules) 5624 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey WriteAndX unicode little endian andx overflow attempt (netbios.rules) 5625 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey little endian andx overflow attempt (netbios.rules) 5626 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey unicode little endian andx overflow attempt (netbios.rules) 5627 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey WriteAndX little endian andx overflow attempt (netbios.rules) 5628 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey little endian andx overflow attempt (netbios.rules) 5629 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX unicode attempt (netbios.rules) 5630 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown attempt (netbios.rules) 5631 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX attempt (netbios.rules) 5632 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown attempt (netbios.rules) 5633 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX unicode attempt (netbios.rules) 5634 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown unicode little endian attempt (netbios.rules) 5635 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown little endian attempt (netbios.rules) 5636 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX unicode little endian attempt (netbios.rules) 5637 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX little endian attempt (netbios.rules) 5638 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX little endian attempt (netbios.rules) 5639 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown little endian attempt (netbios.rules) 5640 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX unicode little endian attempt (netbios.rules) 5641 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown WriteAndX attempt (netbios.rules) 5642 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown unicode attempt (netbios.rules) 5643 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown WriteAndX unicode attempt (netbios.rules) 5644 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown attempt (netbios.rules) 5645 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX andx attempt (netbios.rules) 5646 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown unicode andx attempt (netbios.rules) 5647 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown little endian andx attempt (netbios.rules) 5648 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown andx attempt (netbios.rules) 5649 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX little endian andx attempt (netbios.rules) 5650 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown unicode little endian andx attempt (netbios.rules) 5651 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown unicode little endian andx attempt (netbios.rules) 5652 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX unicode andx attempt (netbios.rules) 5653 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX unicode little endian andx attempt (netbios.rules) 5654 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown little endian andx attempt (netbios.rules) 5655 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX andx attempt (netbios.rules) 5656 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown unicode andx attempt (netbios.rules) 5657 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown unicode little endian andx attempt (netbios.rules) 5658 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown WriteAndX unicode little endian andx attempt (netbios.rules) 5659 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown WriteAndX little endian andx attempt (netbios.rules) 5660 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown unicode andx attempt (netbios.rules) 5661 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX unicode andx attempt (netbios.rules) 5662 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown andx attempt (netbios.rules) 5663 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX andx attempt (netbios.rules) 5664 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown andx attempt (netbios.rules) 5665 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX unicode andx attempt (netbios.rules) 5666 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown unicode little endian andx attempt (netbios.rules) 5667 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown little endian andx attempt (netbios.rules) 5668 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX unicode little endian andx attempt (netbios.rules) 5669 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX little endian andx attempt (netbios.rules) 5670 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX little endian andx attempt (netbios.rules) 5671 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown little endian andx attempt (netbios.rules) 5672 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX unicode little endian andx attempt (netbios.rules) 5673 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown WriteAndX andx attempt (netbios.rules) 5674 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown unicode andx attempt (netbios.rules) 5675 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown WriteAndX unicode andx attempt (netbios.rules) 5676 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown andx attempt (netbios.rules) 5677 <-> Disabled <-> NETBIOS SMB Session Setup username overflow attempt (netbios.rules) 5678 <-> Disabled <-> NETBIOS SMB-DS Session Setup username overflow attempt (netbios.rules) 5679 <-> Disabled <-> NETBIOS SMB-DS Session Setup unicode username overflow attempt (netbios.rules) 5680 <-> Disabled <-> NETBIOS-DG SMB Session Setup username overflow attempt (netbios.rules) 5681 <-> Disabled <-> NETBIOS-DG SMB Session Setup unicode username overflow attempt (netbios.rules) 5682 <-> Disabled <-> NETBIOS SMB Session Setup unicode andx username overflow attempt (netbios.rules) 5683 <-> Disabled <-> NETBIOS-DG SMB Session Setup andx username overflow attempt (netbios.rules) 5684 <-> Disabled <-> NETBIOS-DG SMB Session Setup unicode andx username overflow attempt (netbios.rules) 6014 <-> Disabled <-> BACKDOOR coolcat runtime connection detection - tcp 3 (backdoor.rules) 6702 <-> Disabled <-> NETBIOS SMB NT Trans Secondary Param Count overflow attempt (netbios.rules) 6703 <-> Disabled <-> NETBIOS SMB NT Trans Secondary unicode Param Count overflow attempt (netbios.rules) 6704 <-> Disabled <-> NETBIOS SMB-DS NT Trans Secondary Param Count overflow attempt (netbios.rules) 6705 <-> Disabled <-> NETBIOS SMB-DS NT Trans Secondary unicode Param Count overflow attempt (netbios.rules) 6706 <-> Disabled <-> NETBIOS-DG SMB NT Trans Secondary Param Count overflow attempt (netbios.rules) 6707 <-> Disabled <-> NETBIOS-DG SMB NT Trans Secondary unicode Param Count overflow attempt (netbios.rules) 6708 <-> Disabled <-> NETBIOS SMB NT Trans Secondary andx Param Count overflow attempt (netbios.rules) 6709 <-> Disabled <-> NETBIOS SMB NT Trans Secondary unicode andx Param Count overflow attempt (netbios.rules) 6710 <-> Disabled <-> NETBIOS SMB-DS NT Trans Secondary andx Param Count overflow attempt (netbios.rules) 6711 <-> Disabled <-> NETBIOS SMB-DS NT Trans Secondary unicode andx Param Count overflow attempt (netbios.rules) 6712 <-> Disabled <-> NETBIOS-DG SMB NT Trans Secondary andx Param Count overflow attempt (netbios.rules) 6713 <-> Disabled <-> NETBIOS-DG SMB NT Trans Secondary unicode andx Param Count overflow attempt (netbios.rules) 7100 <-> Disabled <-> DELETED BACKDOOR mass connect 1.1 runtime detection - http (deleted.rules) 7555 <-> Disabled <-> DELETED SPYWARE-PUT Adware hxdl runtime detection - crypt user-agent (deleted.rules) 7614 <-> Disabled <-> BACKDOOR flux 1.0 runtime detection - keep alive - flowbit set (backdoor.rules) 7615 <-> Disabled <-> BACKDOOR flux 1.0 runtime detection - keep alive (backdoor.rules) 7735 <-> Disabled <-> BACKDOOR bionet 4.05 runtime detection - initial connection (backdoor.rules) 8060 <-> Enabled <-> EXPLOIT UltraVNC VNCLog buffer overflow (exploit.rules) 8442 <-> Disabled <-> DELETED SMTP Mozilla regular expression heap corruption attempt (deleted.rules) 8443 <-> Disabled <-> DELETED WEB-CLIENT Mozilla regular expression heap corruption attempt (deleted.rules) State change rules: 1233 <-> Disabled <-> WEB-CLIENT Outlook EML access (web-client.rules) 1284 <-> Disabled <-> WEB-CLIENT readme.eml download attempt (web-client.rules) 1290 <-> Disabled <-> WEB-CLIENT readme.eml autoload attempt (web-client.rules) 1735 <-> Disabled <-> WEB-CLIENT XMLHttpRequest attempt (web-client.rules) 1840 <-> Disabled <-> WEB-CLIENT Javascript document.domain attempt (web-client.rules) 2435 <-> Disabled <-> WEB-CLIENT Microsoft emf metafile access (web-client.rules) 2436 <-> Disabled <-> WEB-CLIENT Microsoft wmf metafile access (web-client.rules) 2438 <-> Disabled <-> WEB-CLIENT RealPlayer playlist file URL overflow attempt (web-client.rules) 2439 <-> Disabled <-> WEB-CLIENT RealPlayer playlist http URL overflow attempt (web-client.rules) 2440 <-> Disabled <-> WEB-CLIENT RealPlayer playlist rtsp URL overflow attempt (web-client.rules) 2485 <-> Disabled <-> WEB-CLIENT Norton antivirus sysmspam.dll load attempt (web-client.rules) 2577 <-> Disabled <-> WEB-CLIENT local resource redirection attempt (web-client.rules) 2589 <-> Disabled <-> WEB-CLIENT Content-Disposition CLSID command attempt (web-client.rules) 2671 <-> Disabled <-> WEB-CLIENT bitmap BitmapOffset integer overflow attempt (web-client.rules) 2673 <-> Disabled <-> WEB-CLIENT libpng tRNS overflow attempt (web-client.rules) 3079 <-> Disabled <-> WEB-CLIENT Microsoft ANI file parsing overflow (web-client.rules) 3088 <-> Disabled <-> WEB-CLIENT winamp .cda file name overflow attempt (web-client.rules) 3132 <-> Disabled <-> WEB-CLIENT PNG large image width download attempt (web-client.rules) 3133 <-> Disabled <-> WEB-CLIENT PNG large image height download attempt (web-client.rules) 3134 <-> Disabled <-> WEB-CLIENT PNG large colour depth download attempt (web-client.rules) 3148 <-> Disabled <-> WEB-CLIENT winhelp clsid attempt (web-client.rules) 3149 <-> Disabled <-> WEB-CLIENT object type overflow attempt (web-client.rules) 3192 <-> Disabled <-> WEB-CLIENT Windows Media Player directory traversal via Content-Disposition attempt (web-client.rules) 3470 <-> Disabled <-> WEB-CLIENT RealPlayer VIDORV30 header length buffer overflow (web-client.rules) 3471 <-> Disabled <-> WEB-CLIENT iTunes playlist URL overflow attempt (web-client.rules) 3550 <-> Disabled <-> WEB-CLIENT HTML http scheme hostname overflow attempt (web-client.rules) 3551 <-> Disabled <-> WEB-CLIENT .hta download attempt (web-client.rules) 3552 <-> Disabled <-> WEB-CLIENT OLE32 MSHTA masquerade attempt (web-client.rules) 3553 <-> Disabled <-> WEB-CLIENT HTML DOM null element insertion attempt (web-client.rules) 3632 <-> Disabled <-> WEB-CLIENT Mozilla bitmap width integer overflow attempt (web-client.rules) 3633 <-> Disabled <-> WEB-CLIENT bitmap transfer (web-client.rules) 3634 <-> Disabled <-> WEB-CLIENT Mozilla bitmap width integer overflow multipacket attempt (web-client.rules) 3684 <-> Disabled <-> WEB-CLIENT Bitmap Transfer (web-client.rules) 3685 <-> Disabled <-> WEB-CLIENT bitmap BitmapOffset multipacket integer overflow attempt (web-client.rules) 3686 <-> Disabled <-> WEB-CLIENT Internet Explorer Content Advisor attempted overflow (web-client.rules) 3689 <-> Disabled <-> WEB-CLIENT Internet Explorer tRNS overflow attempt (web-client.rules) 3814 <-> Disabled <-> WEB-CLIENT IE javaprxy.dll COM access (web-client.rules) 3819 <-> Disabled <-> WEB-CLIENT multipacket CHM file transfer start (web-client.rules) 3820 <-> Disabled <-> WEB-CLIENT multipacket CHM file transfer attempt (web-client.rules) 3821 <-> Disabled <-> WEB-CLIENT CHM file transfer attempt (web-client.rules) 4132 <-> Disabled <-> WEB-CLIENT msdds clsid attempt (web-client.rules) 4133 <-> Disabled <-> WEB-CLIENT devenum clsid attempt (web-client.rules) 4134 <-> Disabled <-> WEB-CLIENT blnmgr clsid attempt (web-client.rules) 4135 <-> Disabled <-> WEB-CLIENT IE JPEG heap overflow single packet attempt (web-client.rules) 4145 <-> Disabled <-> WEB-CLIENT Windows Trouble Shooter ActiveX Object Access (web-client.rules) 4146 <-> Disabled <-> WEB-CLIENT Share Point Portal Services Log Sink ActiveX Object Access (web-client.rules) 4147 <-> Disabled <-> WEB-CLIENT ActiveLabel ActiveX Object Access (web-client.rules) 4150 <-> Disabled <-> WEB-CLIENT Outlook View ActiveX Object Access (web-client.rules) 4151 <-> Disabled <-> WEB-CLIENT System Monitor Source Properties ActiveX Object Access (web-client.rules) 4152 <-> Disabled <-> WEB-CLIENT Windows Media Player 6.4 ActiveX Object Access (web-client.rules) 4153 <-> Disabled <-> WEB-CLIENT Eyedog ActiveX Object Access (web-client.rules) 4154 <-> Disabled <-> WEB-CLIENT Active Setup ActiveX Object Access (web-client.rules) 4155 <-> Disabled <-> WEB-CLIENT htmlfile ActiveX Object Access (web-client.rules) 4156 <-> Disabled <-> WEB-CLIENT Windows Media Player 7+ ActiveX Object Access (web-client.rules) 4157 <-> Disabled <-> WEB-CLIENT MSN Setup BBS 4.71.0.10 ActiveX Object Access (web-client.rules) 4158 <-> Disabled <-> WEB-CLIENT Windows Media Player Active Movie ActiveX Object Access (web-client.rules) 4159 <-> Disabled <-> WEB-CLIENT Multimedia File Property Sheet ActiveX Object Access (web-client.rules) 4160 <-> Disabled <-> WEB-CLIENT Microsoft Windows Reporting Tool ActiveX Object Access (web-client.rules) 4161 <-> Disabled <-> WEB-CLIENT DigWebX MSN ActiveX Object Access (web-client.rules) 4162 <-> Disabled <-> WEB-CLIENT DigWebX MSN ActiveX Object Access (web-client.rules) 4163 <-> Disabled <-> WEB-CLIENT DigWebX MSN ActiveX Object Access (web-client.rules) 4164 <-> Disabled <-> WEB-CLIENT DigWebX MSN ActiveX Object Access (web-client.rules) 4165 <-> Disabled <-> WEB-CLIENT Image Control 1.0 ActiveX Object Access (web-client.rules) 4166 <-> Disabled <-> WEB-CLIENT Shell.Explorer ActiveX Object Access (web-client.rules) 4167 <-> Disabled <-> WEB-CLIENT MSN Heartbeat ActiveX Object Access (web-client.rules) 4168 <-> Disabled <-> WEB-CLIENT Shell Automation Service ActiveX Object Access (web-client.rules) 4169 <-> Disabled <-> WEB-CLIENT Internet Explorer Active Setup ActiveX Object Access (web-client.rules) 4170 <-> Disabled <-> WEB-CLIENT Office 2000/2002 Web Components Data Source Control ActiveX Object Access (web-client.rules) 4171 <-> Disabled <-> WEB-CLIENT Registration Wizard ActiveX Object Access (web-client.rules) 4172 <-> Disabled <-> WEB-CLIENT Microsoft Agent v1.5 ActiveX Object Access (web-client.rules) 4173 <-> Disabled <-> WEB-CLIENT MsnPUpld ActiveX Object Access (web-client.rules) 4174 <-> Disabled <-> WEB-CLIENT Symantec RuFSI registry Information Class ActiveX Object Access (web-client.rules) 4175 <-> Disabled <-> WEB-CLIENT Office 2000/2002 Web Components PivotTable ActiveX Object Access (web-client.rules) 4176 <-> Disabled <-> WEB-CLIENT Office 2000 and 2002 Web Components Chart ActiveX Object Access (web-client.rules) 4177 <-> Disabled <-> WEB-CLIENT Office 2000 and 2002 Web Components Spreadsheet ActiveX Object Access (web-client.rules) 4178 <-> Disabled <-> WEB-CLIENT Office 2000 and 2002 Web Components Record Navigation Control ActiveX Object Access (web-client.rules) 4179 <-> Disabled <-> WEB-CLIENT DirectX Files Viewer ActiveX Object Access (web-client.rules) 4180 <-> Disabled <-> WEB-CLIENT Kodak Image Scan ActiveX Object Access (web-client.rules) 4181 <-> Disabled <-> WEB-CLIENT Smartcard Enrollment ActiveX Object Access (web-client.rules) 4182 <-> Disabled <-> WEB-CLIENT MSN Chat v4.5, 4.6 ActiveX Object Access (web-client.rules) 4183 <-> Disabled <-> WEB-CLIENT HTML Help ActiveX Object Access (web-client.rules) 4184 <-> Disabled <-> WEB-CLIENT Certificate Enrollment ActiveX Object Access (web-client.rules) 4185 <-> Disabled <-> WEB-CLIENT Terminal Services Advanced Client ActiveX Object Access (web-client.rules) 4186 <-> Disabled <-> WEB-CLIENT Kodak Image Editing ActiveX Object Access (web-client.rules) 4187 <-> Disabled <-> WEB-CLIENT Terminal Services Advanced Client ActiveX Object Access (web-client.rules) 4188 <-> Disabled <-> WEB-CLIENT RAV Online Scanner ActiveX Object Access (web-client.rules) 4189 <-> Disabled <-> WEB-CLIENT Third-Party Plugin ActiveX Object Access (web-client.rules) 4190 <-> Disabled <-> WEB-CLIENT Kodak Thumbnail Image ActiveX Object Access (web-client.rules) 4191 <-> Disabled <-> WEB-CLIENT MsnPUpld ActiveX Object Access (web-client.rules) 4192 <-> Disabled <-> WEB-CLIENT HHOpen ActiveX Object Access (web-client.rules) 4193 <-> Disabled <-> WEB-CLIENT Kodak Image Editing ActiveX Object Access (web-client.rules) 4197 <-> Disabled <-> WEB-CLIENT DigWebX MSN ActiveX Object Access (web-client.rules) 4198 <-> Disabled <-> WEB-CLIENT Internet Explorer Blnmgrps.dll ActiveX Object Access (web-client.rules) 4199 <-> Disabled <-> WEB-CLIENT Internet Explorer Blnmgrps.dll ActiveX Object Access (web-client.rules) 4200 <-> Disabled <-> WEB-CLIENT Index Server Scope Administration ActiveX Object Access (web-client.rules) 4201 <-> Disabled <-> WEB-CLIENT Queued Components Recorder ActiveX Object Access (web-client.rules) 4202 <-> Disabled <-> WEB-CLIENT DirectAnimation ActiveX Object Access (web-client.rules) 4203 <-> Disabled <-> WEB-CLIENT Microsoft Marquee Control ActiveX Object Access (web-client.rules) 4204 <-> Disabled <-> WEB-CLIENT Microsoft DT PolyLine Control 2 ActiveX Object Access (web-client.rules) 4205 <-> Disabled <-> WEB-CLIENT Microsoft Visual Database Tools Database Designer v7.0 ActiveX Object Access (web-client.rules) 4206 <-> Disabled <-> WEB-CLIENT Microsoft MPEG-4 Video Decompressor Property Page ActiveX Object Access (web-client.rules) 4207 <-> Disabled <-> WEB-CLIENT Microsoft MS Audio Decompressor Control Property Page ActiveX Object Access (web-client.rules) 4208 <-> Disabled <-> WEB-CLIENT LexRefStEsObject Class ActiveX Object Access (web-client.rules) 4209 <-> Disabled <-> WEB-CLIENT LexRefStFrObject Class ActiveX Object Access (web-client.rules) 4210 <-> Disabled <-> WEB-CLIENT Internet Explorer Msb1geen.dll ActiveX Object Access (web-client.rules) 4211 <-> Disabled <-> WEB-CLIENT Microsoft DDS Library Shape Control ActiveX Object Access (web-client.rules) 4212 <-> Disabled <-> WEB-CLIENT Microsoft DDS Generic Class ActiveX Object Access (web-client.rules) 4213 <-> Disabled <-> WEB-CLIENT Microsoft DDS Picture Shape Control ActiveX Object Access (web-client.rules) 4214 <-> Disabled <-> WEB-CLIENT Microsoft TipGW Init ActiveX Object Access (web-client.rules) 4215 <-> Disabled <-> WEB-CLIENT Microsoft HTML Popup Window ActiveX Object Access (web-client.rules) 4216 <-> Disabled <-> WEB-CLIENT CLSID_CComAcctImport ActiveX Object Access (web-client.rules) 4217 <-> Disabled <-> WEB-CLIENT Microsoft Office Services on the Web Free/Busy ActiveX Object Access (web-client.rules) 4218 <-> Disabled <-> WEB-CLIENT Microsoft Visual Basic WebClass ActiveX Object Access (web-client.rules) 4219 <-> Disabled <-> WEB-CLIENT Microsoft Network Connections Tray ActiveX Object Access (web-client.rules) 4220 <-> Disabled <-> WEB-CLIENT Microsoft Network and Dial-Up Connections ActiveX Object Access (web-client.rules) 4221 <-> Disabled <-> WEB-CLIENT Microsoft ProxyStub Dispatch ActiveX Object Access (web-client.rules) 4222 <-> Disabled <-> WEB-CLIENT Internet Explorer Outllib.dll ActiveX Object Access (web-client.rules) 4223 <-> Disabled <-> WEB-CLIENT Microsoft OpenCable Class ActiveX Object Access (web-client.rules) 4224 <-> Disabled <-> WEB-CLIENT Microsoft VideoPort ActiveX Object Access (web-client.rules) 4225 <-> Disabled <-> WEB-CLIENT Microsoft Repository ActiveX Object Access (web-client.rules) 4226 <-> Disabled <-> WEB-CLIENT Microsoft DocHost User Interface Handler ActiveX Object Access (web-client.rules) 4227 <-> Disabled <-> WEB-CLIENT Microsoft Network Connections ActiveX Object Access (web-client.rules) 4228 <-> Disabled <-> WEB-CLIENT Microsoft Windows Start Menu ActiveX Object Access (web-client.rules) 4229 <-> Disabled <-> WEB-CLIENT MSAPP Export Support for Microsoft Access ActiveX Object Access (web-client.rules) 4230 <-> Disabled <-> WEB-CLIENT Search Assistant UI ActiveX Object Access (web-client.rules) 4231 <-> Disabled <-> WEB-CLIENT Microsoft SysTray ActiveX Object Access (web-client.rules) 4232 <-> Disabled <-> WEB-CLIENT Microsoft SysTray Invoker ActiveX Object Access (web-client.rules) 4233 <-> Disabled <-> WEB-CLIENT Microsoft Visual Database Tools Query Designer v7.0 ActiveX Object Access (web-client.rules) 4234 <-> Disabled <-> WEB-CLIENT Microsoft MSVTDGridCtrl7 ActiveX Object Access (web-client.rules) 4235 <-> Disabled <-> WEB-CLIENT Helper Object for Java ActiveX Object Access (web-client.rules) 4236 <-> Disabled <-> WEB-CLIENT WMI ASDI Extension ActiveX Object Access (web-client.rules) 4643 <-> Disabled <-> WEB-CLIENT malformed windows shortcut file buffer overflow attempt (web-client.rules) 4644 <-> Disabled <-> WEB-CLIENT malformed windows shortcut file with comment buffer overflow attempt (web-client.rules) 4648 <-> Disabled <-> WEB-CLIENT wang image admin activex object access (web-client.rules) 4890 <-> Disabled <-> WEB-CLIENT IAVIStream & IAVIFile Proxy ActiveX Object Access (web-client.rules) 4891 <-> Disabled <-> WEB-CLIENT cfw Class ActiveX Object Access (web-client.rules) 4892 <-> Disabled <-> WEB-CLIENT MTSEvents Class ActiveX Object Access (web-client.rules) 4893 <-> Disabled <-> WEB-CLIENT Trident HTMLEditor ActiveX Object Access (web-client.rules) 4894 <-> Disabled <-> WEB-CLIENT PSEnumVariant ActiveX Object Access (web-client.rules) 4895 <-> Disabled <-> WEB-CLIENT PSTypeInfo ActiveX Object Access (web-client.rules) 4896 <-> Disabled <-> WEB-CLIENT PSTypeLib ActiveX Object Access (web-client.rules) 4897 <-> Disabled <-> WEB-CLIENT PSOAInterface ActiveX Object Access (web-client.rules) 4898 <-> Disabled <-> WEB-CLIENT PSTypeComp ActiveX Object Access (web-client.rules) 4899 <-> Disabled <-> WEB-CLIENT ISupportErrorInfo Interface ActiveX Object Access (web-client.rules) 4900 <-> Disabled <-> WEB-CLIENT Outlook Progress Ctl ActiveX Object Access (web-client.rules) 4901 <-> Disabled <-> WEB-CLIENT VMR Allocator Presenter 9 ActiveX Object Access (web-client.rules) 4902 <-> Disabled <-> WEB-CLIENT Video Mixing Renderer 9 ActiveX Object Access (web-client.rules) 4903 <-> Disabled <-> WEB-CLIENT VMR ImageSync 9 ActiveX Object Access (web-client.rules) 4904 <-> Disabled <-> WEB-CLIENT Microsoft Repository Alias ActiveX Object Access (web-client.rules) 4905 <-> Disabled <-> WEB-CLIENT Microsoft Repository Object ActiveX Object Access (web-client.rules) 4906 <-> Disabled <-> WEB-CLIENT Microsoft Repository Interface Definition ActiveX Object Access (web-client.rules) 4907 <-> Disabled <-> WEB-CLIENT Microsoft Repository Collection Definition ActiveX Object Access (web-client.rules) 4908 <-> Disabled <-> WEB-CLIENT Microsoft Repository Method Definition ActiveX Object Access (web-client.rules) 4909 <-> Disabled <-> WEB-CLIENT Microsoft Repository Property Definition ActiveX Object Access (web-client.rules) 4910 <-> Disabled <-> WEB-CLIENT Microsoft Repository Relationship Definition ActiveX Object Access (web-client.rules) 4911 <-> Disabled <-> WEB-CLIENT Microsoft Repository Type Library ActiveX Object Access (web-client.rules) 4912 <-> Disabled <-> WEB-CLIENT Microsoft Repository Root ActiveX Object Access (web-client.rules) 4913 <-> Disabled <-> WEB-CLIENT Microsoft Repository Workspace ActiveX Object Access (web-client.rules) 4914 <-> Disabled <-> WEB-CLIENT Microsoft Repository Script Definition ActiveX Object Access (web-client.rules) 4915 <-> Disabled <-> WEB-CLIENT Shortcut Handler ActiveX Object Access (web-client.rules) 4982 <-> Disabled <-> WEB-CLIENT Adodb.Stream ActiveX Object Access (web-client.rules) 5319 <-> Disabled <-> WEB-CLIENT Metasploit Windows picture and fax viewer wmf arbitrary code execution attempt (web-client.rules) 5710 <-> Disabled <-> WEB-CLIENT Windows Media Player Plugin for Non-IE browsers buffer overflow attempt (web-client.rules) 5711 <-> Disabled <-> WEB-CLIENT Windows Media Player zero length bitmap heap overflow attempt (web-client.rules) 5712 <-> Disabled <-> WEB-CLIENT Windows Media Player invalid data offset bitmap heap overflow attempt (web-client.rules) 5713 <-> Disabled <-> WEB-CLIENT Windows Metafile invalid header size integer overflow (web-client.rules) 5740 <-> Disabled <-> WEB-CLIENT Microsoft HTML help workshop file .hhp download attempt (web-client.rules) 5741 <-> Disabled <-> WEB-CLIENT Microsoft HTML help workshop buffer overflow attempt (web-client.rules) 6002 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS Rectilinear GDD Layout ActiveX Object Access (web-client.rules) 6003 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS Rectilinear GDD Route ActiveX Object Access (web-client.rules) 6004 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS Circular Auto Layout Logic 2 ActiveX Object Access (web-client.rules) 6005 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS Straight Line Routing Logic 2 ActiveX Object Access (web-client.rules) 6006 <-> Disabled <-> WEB-CLIENT Microsoft DT Icon Control ActiveX Object Access (web-client.rules) 6007 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS OrgChart GDD Layout ActiveX Object Access (web-client.rules) 6008 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS OrgChart GDD Route ActiveX Object Access (web-client.rules) 6009 <-> Disabled <-> WEB-CLIENT RDS.Dataspace ActiveX Object Access (web-client.rules) 6504 <-> Disabled <-> WEB-CLIENT Sophos Anti-Virus CAB file overflow attempt (web-client.rules) 6505 <-> Disabled <-> WEB-CLIENT quicktime fpx file SectNumMiniFAT overflow attempt (web-client.rules) 6506 <-> Disabled <-> WEB-CLIENT quicktime udta atom overflow attempt (web-client.rules) 6509 <-> Disabled <-> WEB-CLIENT Internet Explorer mhtml uri href buffer overflow attempt (web-client.rules) 6510 <-> Disabled <-> WEB-CLIENT Internet Explorer mhtml uri shortcut buffer overflow attempt (web-client.rules) 6516 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Light ActiveX function call access (web-client.rules) 6517 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Light ActiveX CLSID access (web-client.rules) 6518 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Light ActiveX CLSID unicode access (web-client.rules) 6680 <-> Disabled <-> WEB-CLIENT Windows Media Transform Effects ActiveX CLSID unicode access (web-client.rules) 6681 <-> Disabled <-> WEB-CLIENT Windows Media Transform Effects ActiveX CLSID access (web-client.rules) 6682 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect2Inputs ActiveX function call access (web-client.rules) 6683 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect1Input ActiveX CLSID unicode access (web-client.rules) 6684 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect1Input ActiveX CLSID access (web-client.rules) 6685 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect2Inputs ActiveX CLSID unicode access (web-client.rules) 6686 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect2Inputs ActiveX CLSID access (web-client.rules) 6687 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect1Input ActiveX function call access (web-client.rules) 7002 <-> Disabled <-> WEB-CLIENT excel url unicode overflow attempt (web-client.rules) 7004 <-> Disabled <-> WEB-CLIENT Internet.HHCtrl.1 ActiveX function call access (web-client.rules) 7006 <-> Disabled <-> WEB-CLIENT ASControls.InstallEngineCtl ActiveX function call access (web-client.rules) 7007 <-> Disabled <-> WEB-CLIENT AxDebugger.Document.1 ActiveX function call access (web-client.rules) 7008 <-> Disabled <-> WEB-CLIENT DirectAnimation.DAUserData ActiveX function call access (web-client.rules) 7009 <-> Disabled <-> WEB-CLIENT DirectAnimation.StructuredGraphicsControl ActiveX function call access (web-client.rules) 7010 <-> Disabled <-> WEB-CLIENT HtmlDlgSafeHelper.HtmlDlgSafeHelper.1 ActiveX function call access (web-client.rules) 7011 <-> Disabled <-> WEB-CLIENT HtmlDlgSafeHelper.HtmlDlgSafeHelper ActiveX function call access (web-client.rules) 7012 <-> Disabled <-> WEB-CLIENT Internet.PopupMenu.1 ActiveX function call access (web-client.rules) 7013 <-> Disabled <-> WEB-CLIENT Microsoft.ISCatAdm ActiveX function call access (web-client.rules) 7014 <-> Disabled <-> WEB-CLIENT NMSA.ASFSourceMediaDescription.1 ActiveX function call access (web-client.rules) 7015 <-> Disabled <-> WEB-CLIENT NMSA.MediaDescription ActiveX function call access (web-client.rules) 7016 <-> Disabled <-> WEB-CLIENT Object.Microsoft.DXTFilter ActiveX function call access (web-client.rules) 7017 <-> Disabled <-> WEB-CLIENT RDS.DataControl ActiveX function call access (web-client.rules) 7018 <-> Disabled <-> WEB-CLIENT Sysmon ActiveX function call access (web-client.rules) 7023 <-> Disabled <-> WEB-CLIENT xls file download (web-client.rules) 7026 <-> Disabled <-> WEB-CLIENT RDS.Dataspace ActiveX function call access (web-client.rules) 7425 <-> Disabled <-> WEB-CLIENT 9x8Resize ActiveX CLSID access (web-client.rules) 7426 <-> Disabled <-> WEB-CLIENT 9x8Resize ActiveX CLSID unicode access (web-client.rules) 7427 <-> Disabled <-> WEB-CLIENT Allocator Fix ActiveX CLSID access (web-client.rules) 7428 <-> Disabled <-> WEB-CLIENT Allocator Fix ActiveX CLSID unicode access (web-client.rules) 7429 <-> Disabled <-> WEB-CLIENT Bitmap ActiveX CLSID access (web-client.rules) 7430 <-> Disabled <-> WEB-CLIENT Bitmap ActiveX CLSID unicode access (web-client.rules) 7431 <-> Disabled <-> WEB-CLIENT DirectFrame.DirectControl.1 ActiveX CLSID access (web-client.rules) 7432 <-> Disabled <-> WEB-CLIENT DirectFrame.DirectControl.1 ActiveX CLSID unicode access (web-client.rules) 7433 <-> Disabled <-> WEB-CLIENT DirectX Transform Wrapper Property Page ActiveX CLSID access (web-client.rules) 7434 <-> Disabled <-> WEB-CLIENT DirectX Transform Wrapper Property Page ActiveX CLSID unicode access (web-client.rules) 7435 <-> Disabled <-> WEB-CLIENT Dynamic Casts ActiveX CLSID access (web-client.rules) 7436 <-> Disabled <-> WEB-CLIENT Dynamic Casts ActiveX CLSID unicode access (web-client.rules) 7437 <-> Disabled <-> WEB-CLIENT Frame Eater ActiveX CLSID access (web-client.rules) 7438 <-> Disabled <-> WEB-CLIENT Frame Eater ActiveX CLSID unicode access (web-client.rules) 7439 <-> Disabled <-> WEB-CLIENT HTML Help ActiveX CLSID access (web-client.rules) 7440 <-> Disabled <-> WEB-CLIENT HTML Help ActiveX CLSID unicode access (web-client.rules) 7441 <-> Disabled <-> WEB-CLIENT HTML Help ActiveX CLSID unicode access (web-client.rules) 7442 <-> Disabled <-> WEB-CLIENT mmAEPlugIn.AEPlugIn.1 ActiveX CLSID access (web-client.rules) 7443 <-> Disabled <-> WEB-CLIENT mmAEPlugIn.AEPlugIn.1 ActiveX CLSID unicode access (web-client.rules) 7444 <-> Disabled <-> WEB-CLIENT Mmedia.AsyncMHandler.1 ActiveX CLSID access (web-client.rules) 7445 <-> Disabled <-> WEB-CLIENT Mmedia.AsyncMHandler.1 ActiveX CLSID unicode access (web-client.rules) 7446 <-> Disabled <-> WEB-CLIENT Record Queue ActiveX CLSID access (web-client.rules) 7447 <-> Disabled <-> WEB-CLIENT Record Queue ActiveX CLSID unicode access (web-client.rules) 7448 <-> Disabled <-> WEB-CLIENT ShotDetect ActiveX CLSID access (web-client.rules) 7449 <-> Disabled <-> WEB-CLIENT ShotDetect ActiveX CLSID unicode access (web-client.rules) 7450 <-> Disabled <-> WEB-CLIENT Stetch ActiveX CLSID access (web-client.rules) 7451 <-> Disabled <-> WEB-CLIENT Stetch ActiveX CLSID unicode access (web-client.rules) 7452 <-> Disabled <-> WEB-CLIENT WM Color Converter Filter ActiveX CLSID access (web-client.rules) 7453 <-> Disabled <-> WEB-CLIENT WM Color Converter Filter ActiveX CLSID unicode access (web-client.rules) 7454 <-> Disabled <-> WEB-CLIENT Wmm2ae.dll ActiveX CLSID access (web-client.rules) 7455 <-> Disabled <-> WEB-CLIENT Wmm2ae.dll ActiveX CLSID unicode access (web-client.rules) 7456 <-> Disabled <-> WEB-CLIENT Wmm2fxa.dll ActiveX CLSID access (web-client.rules) 7457 <-> Disabled <-> WEB-CLIENT Wmm2fxa.dll ActiveX CLSID unicode access (web-client.rules) 7458 <-> Disabled <-> WEB-CLIENT Wmm2fxb.dll ActiveX CLSID access (web-client.rules) 7459 <-> Disabled <-> WEB-CLIENT Wmm2fxb.dll ActiveX CLSID unicode access (web-client.rules) 7460 <-> Disabled <-> WEB-CLIENT WMT Audio Analyzer ActiveX CLSID access (web-client.rules) 7461 <-> Disabled <-> WEB-CLIENT WMT Audio Analyzer ActiveX CLSID unicode access (web-client.rules) 7462 <-> Disabled <-> WEB-CLIENT WMT Black Frame Generator ActiveX CLSID access (web-client.rules) 7463 <-> Disabled <-> WEB-CLIENT WMT Black Frame Generator ActiveX CLSID unicode access (web-client.rules) 7464 <-> Disabled <-> WEB-CLIENT WMT DeInterlace Filter ActiveX CLSID access (web-client.rules) 7465 <-> Disabled <-> WEB-CLIENT WMT DeInterlace Filter ActiveX CLSID unicode access (web-client.rules) 7466 <-> Disabled <-> WEB-CLIENT WMT DeInterlace Prop Page ActiveX CLSID access (web-client.rules) 7467 <-> Disabled <-> WEB-CLIENT WMT DeInterlace Prop Page ActiveX CLSID unicode access (web-client.rules) 7468 <-> Disabled <-> WEB-CLIENT WMT DirectX Transform Wrapper ActiveX CLSID access (web-client.rules) 7469 <-> Disabled <-> WEB-CLIENT WMT DirectX Transform Wrapper ActiveX CLSID unicode access (web-client.rules) 7470 <-> Disabled <-> WEB-CLIENT WMT DV Extract Filter ActiveX CLSID access (web-client.rules) 7471 <-> Disabled <-> WEB-CLIENT WMT DV Extract Filter ActiveX CLSID unicode access (web-client.rules) 7472 <-> Disabled <-> WEB-CLIENT WMT FormatConversion Prop Page ActiveX CLSID access (web-client.rules) 7473 <-> Disabled <-> WEB-CLIENT WMT FormatConversion Prop Page ActiveX CLSID unicode access (web-client.rules) 7474 <-> Disabled <-> WEB-CLIENT WMT FormatConversion ActiveX CLSID access (web-client.rules) 7475 <-> Disabled <-> WEB-CLIENT WMT FormatConversion ActiveX CLSID unicode access (web-client.rules) 7476 <-> Disabled <-> WEB-CLIENT WMT Import Filter ActiveX CLSID access (web-client.rules) 7477 <-> Disabled <-> WEB-CLIENT WMT Import Filter ActiveX CLSID unicode access (web-client.rules) 7478 <-> Disabled <-> WEB-CLIENT WMT Interlacer ActiveX CLSID access (web-client.rules) 7479 <-> Disabled <-> WEB-CLIENT WMT Interlacer ActiveX CLSID unicode access (web-client.rules) 7480 <-> Disabled <-> WEB-CLIENT WMT Log Filter ActiveX CLSID access (web-client.rules) 7481 <-> Disabled <-> WEB-CLIENT WMT Log Filter ActiveX CLSID unicode access (web-client.rules) 7482 <-> Disabled <-> WEB-CLIENT WMT MuxDeMux Filter ActiveX CLSID access (web-client.rules) 7483 <-> Disabled <-> WEB-CLIENT WMT MuxDeMux Filter ActiveX CLSID unicode access (web-client.rules) 7484 <-> Disabled <-> WEB-CLIENT WMT Sample Info Filter ActiveX CLSID access (web-client.rules) 7485 <-> Disabled <-> WEB-CLIENT WMT Sample Info Filter ActiveX CLSID unicode access (web-client.rules) 7486 <-> Disabled <-> WEB-CLIENT WMT Screen Capture Filter Task Page ActiveX CLSID access (web-client.rules) 7487 <-> Disabled <-> WEB-CLIENT WMT Screen Capture Filter Task Page ActiveX CLSID unicode access (web-client.rules) 7488 <-> Disabled <-> WEB-CLIENT WMT Screen capture Filter ActiveX CLSID access (web-client.rules) 7489 <-> Disabled <-> WEB-CLIENT WMT Screen capture Filter ActiveX CLSID unicode access (web-client.rules) 7490 <-> Disabled <-> WEB-CLIENT WMT Switch Filter ActiveX CLSID access (web-client.rules) 7491 <-> Disabled <-> WEB-CLIENT WMT Switch Filter ActiveX CLSID unicode access (web-client.rules) 7492 <-> Disabled <-> WEB-CLIENT WMT Virtual Renderer ActiveX CLSID access (web-client.rules) 7493 <-> Disabled <-> WEB-CLIENT WMT Virtual Renderer ActiveX CLSID unicode access (web-client.rules) 7494 <-> Disabled <-> WEB-CLIENT WMT Virtual Source ActiveX CLSID access (web-client.rules) 7495 <-> Disabled <-> WEB-CLIENT WMT Virtual Source ActiveX CLSID unicode access (web-client.rules) 7496 <-> Disabled <-> WEB-CLIENT WMT Volume ActiveX CLSID access (web-client.rules) 7497 <-> Disabled <-> WEB-CLIENT WMT Volume ActiveX CLSID unicode access (web-client.rules) 7498 <-> Disabled <-> WEB-CLIENT WM TV Out Smooth Picture Filter ActiveX CLSID access (web-client.rules) 7499 <-> Disabled <-> WEB-CLIENT WM TV Out Smooth Picture Filter ActiveX CLSID unicode access (web-client.rules) 7500 <-> Disabled <-> WEB-CLIENT WM VIH2 Fix ActiveX CLSID access (web-client.rules) 7501 <-> Disabled <-> WEB-CLIENT WM VIH2 Fix ActiveX CLSID unicode access (web-client.rules) 7502 <-> Disabled <-> WEB-CLIENT tsuserex.ADsTSUserEx.1 ActiveX CLSID access (web-client.rules) 7503 <-> Disabled <-> WEB-CLIENT tsuserex.ADsTSUserEx.1 ActiveX CLSID unicode access (web-client.rules) 7862 <-> Disabled <-> WEB-CLIENT McSubMgr.IsAppExpired ActiveX function call access (web-client.rules) 7863 <-> Disabled <-> WEB-CLIENT McSubMgr.IsOldAppInstalled ActiveX function call access (web-client.rules) 7864 <-> Disabled <-> WEB-CLIENT McSubMgr ActiveX CLSID access (web-client.rules) 7865 <-> Disabled <-> WEB-CLIENT McSubMgr ActiveX CLSID unicode access (web-client.rules) 7866 <-> Disabled <-> WEB-CLIENT ADODB.Connection ActiveX CLSID access (web-client.rules) 7867 <-> Disabled <-> WEB-CLIENT ADODB.Connection ActiveX CLSID unicode access (web-client.rules) 7868 <-> Disabled <-> WEB-CLIENT ADODB.Recordset ActiveX CLSID access (web-client.rules) 7869 <-> Disabled <-> WEB-CLIENT ADODB.Recordset ActiveX CLSID unicode access (web-client.rules) 7870 <-> Disabled <-> WEB-CLIENT Microsoft Office Data Source Control 9.0 ActiveX CLSID access (web-client.rules) 7871 <-> Disabled <-> WEB-CLIENT Microsoft Office Data Source Control 9.0 ActiveX CLSID unicode access (web-client.rules) 7872 <-> Disabled <-> WEB-CLIENT Microsoft Office Spreadsheet 10.0 ActiveX CLSID access (web-client.rules) 7873 <-> Disabled <-> WEB-CLIENT Microsoft Office Spreadsheet 10.0 ActiveX CLSID unicode access (web-client.rules) 7874 <-> Disabled <-> WEB-CLIENT Microsoft Office PivotTable 10.0 ActiveX CLSID access (web-client.rules) 7875 <-> Disabled <-> WEB-CLIENT Microsoft Office PivotTable 10.0 ActiveX CLSID unicode access (web-client.rules) 7876 <-> Disabled <-> WEB-CLIENT Microsoft Office Data Source Control 10.0 ActiveX CLSID access (web-client.rules) 7877 <-> Disabled <-> WEB-CLIENT Microsoft Office Data Source Control 10.0 ActiveX CLSID unicode access (web-client.rules) 7878 <-> Disabled <-> WEB-CLIENT AxMetaStream.MetaStreamCtl ActiveX CLSID access (web-client.rules) 7879 <-> Disabled <-> WEB-CLIENT AxMetaStream.MetaStreamCtl ActiveX CLSID unicode access (web-client.rules) 7880 <-> Disabled <-> WEB-CLIENT AxMetaStream.MetaStreamCtlSecondary ActiveX CLSID access (web-client.rules) 7881 <-> Disabled <-> WEB-CLIENT AxMetaStream.MetaStreamCtlSecondary ActiveX CLSID unicode access (web-client.rules) 7882 <-> Disabled <-> WEB-CLIENT AccSync.AccSubNotHandler ActiveX CLSID access (web-client.rules) 7883 <-> Disabled <-> WEB-CLIENT AccSync.AccSubNotHandler ActiveX CLSID unicode access (web-client.rules) 7884 <-> Disabled <-> WEB-CLIENT AolCalSvr.ACCalendarListCtrl ActiveX CLSID access (web-client.rules) 7885 <-> Disabled <-> WEB-CLIENT AolCalSvr.ACCalendarListCtrl ActiveX CLSID unicode access (web-client.rules) 7886 <-> Disabled <-> WEB-CLIENT AolCalSvr.ACDictionary ActiveX CLSID access (web-client.rules) 7887 <-> Disabled <-> WEB-CLIENT AolCalSvr.ACDictionary ActiveX CLSID unicode access (web-client.rules) 7888 <-> Disabled <-> WEB-CLIENT AOLFlash.AOLFlash ActiveX CLSID access (web-client.rules) 7889 <-> Disabled <-> WEB-CLIENT AOLFlash.AOLFlash ActiveX CLSID unicode access (web-client.rules) 7890 <-> Disabled <-> WEB-CLIENT AOL.MemExpWz ActiveX CLSID access (web-client.rules) 7891 <-> Disabled <-> WEB-CLIENT AOL.MemExpWz ActiveX CLSID unicode access (web-client.rules) 7892 <-> Disabled <-> WEB-CLIENT AOL Phobos Class ActiveX CLSID access (web-client.rules) 7893 <-> Disabled <-> WEB-CLIENT AOL Phobos Class ActiveX CLSID unicode access (web-client.rules) 7894 <-> Disabled <-> WEB-CLIENT AOL.PicDownloadCtrl ActiveX CLSID access (web-client.rules) 7895 <-> Disabled <-> WEB-CLIENT AOL.PicDownloadCtrl ActiveX CLSID unicode access (web-client.rules) 7896 <-> Disabled <-> WEB-CLIENT AOL.PicEditCtrl ActiveX CLSID access (web-client.rules) 7897 <-> Disabled <-> WEB-CLIENT AOL.PicEditCtrl ActiveX CLSID unicode access (web-client.rules) 7898 <-> Disabled <-> WEB-CLIENT AOL.PicSsvrCtrl ActiveX CLSID access (web-client.rules) 7899 <-> Disabled <-> WEB-CLIENT AOL.PicSsvrCtrl ActiveX CLSID unicode access (web-client.rules) 7900 <-> Disabled <-> WEB-CLIENT AOL.UPFCtrl ActiveX CLSID access (web-client.rules) 7901 <-> Disabled <-> WEB-CLIENT AOL.UPFCtrl ActiveX CLSID unicode access (web-client.rules) 7902 <-> Disabled <-> WEB-CLIENT CDDBControlAOL.CDDBAOLControl ActiveX CLSID access (web-client.rules) 7903 <-> Disabled <-> WEB-CLIENT CDDBControlAOL.CDDBAOLControl ActiveX CLSID unicode access (web-client.rules) 7904 <-> Disabled <-> WEB-CLIENT CDL Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7905 <-> Disabled <-> WEB-CLIENT CDL Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7906 <-> Disabled <-> WEB-CLIENT CDO.KnowledgeSearchFolder ActiveX CLSID access (web-client.rules) 7907 <-> Disabled <-> WEB-CLIENT CDO.KnowledgeSearchFolder ActiveX CLSID unicode access (web-client.rules) 7908 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Chroma ActiveX CLSID access (web-client.rules) 7909 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Chroma ActiveX CLSID unicode access (web-client.rules) 7910 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.DropShadow ActiveX CLSID access (web-client.rules) 7911 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.DropShadow ActiveX CLSID unicode access (web-client.rules) 7912 <-> Disabled <-> WEB-CLIENT DX3DTransform.Microsoft.Shapes ActiveX CLSID access (web-client.rules) 7913 <-> Disabled <-> WEB-CLIENT DX3DTransform.Microsoft.Shapes ActiveX CLSID unicode access (web-client.rules) 7914 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.NDFXArtEffects ActiveX CLSID access (web-client.rules) 7915 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.NDFXArtEffects ActiveX CLSID unicode access (web-client.rules) 7916 <-> Disabled <-> WEB-CLIENT CLSID_IMimeInternational ActiveX CLSID access (web-client.rules) 7917 <-> Disabled <-> WEB-CLIENT CLSID_IMimeInternational ActiveX CLSID unicode access (web-client.rules) 7918 <-> Disabled <-> WEB-CLIENT CoAxTrackVideo Class ActiveX CLSID access (web-client.rules) 7919 <-> Disabled <-> WEB-CLIENT CoAxTrackVideo Class ActiveX CLSID unicode access (web-client.rules) 7920 <-> Disabled <-> WEB-CLIENT DsPropertyPages.OU ActiveX CLSID access (web-client.rules) 7921 <-> Disabled <-> WEB-CLIENT DsPropertyPages.OU ActiveX CLSID unicode access (web-client.rules) 7922 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.RevealTrans ActiveX CLSID access (web-client.rules) 7923 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.RevealTrans ActiveX CLSID unicode access (web-client.rules) 7924 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Shadow ActiveX CLSID access (web-client.rules) 7925 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Shadow ActiveX CLSID unicode access (web-client.rules) 7926 <-> Disabled <-> WEB-CLIENT DXTFilter ActiveX CLSID access (web-client.rules) 7927 <-> Disabled <-> WEB-CLIENT DXTFilter ActiveX CLSID unicode access (web-client.rules) 7928 <-> Disabled <-> WEB-CLIENT file or local Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7929 <-> Disabled <-> WEB-CLIENT file or local Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7930 <-> Disabled <-> WEB-CLIENT FolderItem2 ActiveX CLSID access (web-client.rules) 7931 <-> Disabled <-> WEB-CLIENT FolderItem2 ActiveX CLSID unicode access (web-client.rules) 7932 <-> Disabled <-> WEB-CLIENT FolderItems3 ActiveX CLSID access (web-client.rules) 7933 <-> Disabled <-> WEB-CLIENT FolderItems3 ActiveX CLSID unicode access (web-client.rules) 7934 <-> Disabled <-> WEB-CLIENT ftp Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7935 <-> Disabled <-> WEB-CLIENT ftp Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7936 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Glow ActiveX CLSID access (web-client.rules) 7937 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Glow ActiveX CLSID unicode access (web-client.rules) 7938 <-> Disabled <-> WEB-CLIENT gopher Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7939 <-> Disabled <-> WEB-CLIENT gopher Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7940 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Gradient ActiveX CLSID access (web-client.rules) 7941 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Gradient ActiveX CLSID unicode access (web-client.rules) 7942 <-> Disabled <-> WEB-CLIENT http Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7943 <-> Disabled <-> WEB-CLIENT http Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7944 <-> Disabled <-> WEB-CLIENT https Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7945 <-> Disabled <-> WEB-CLIENT https Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7946 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MaskFilter ActiveX CLSID access (web-client.rules) 7947 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MaskFilter ActiveX CLSID unicode access (web-client.rules) 7948 <-> Disabled <-> WEB-CLIENT Microsoft Common Browser Architecture ActiveX CLSID access (web-client.rules) 7949 <-> Disabled <-> WEB-CLIENT Microsoft Common Browser Architecture ActiveX CLSID unicode access (web-client.rules) 7950 <-> Disabled <-> WEB-CLIENT Microsoft DirectAnimation Control ActiveX CLSID access (web-client.rules) 7951 <-> Disabled <-> WEB-CLIENT Microsoft DirectAnimation Control ActiveX CLSID unicode access (web-client.rules) 7952 <-> Disabled <-> WEB-CLIENT Microsoft DirectAnimation Windowed Control ActiveX CLSID access (web-client.rules) 7953 <-> Disabled <-> WEB-CLIENT Microsoft DirectAnimation Windowed Control ActiveX CLSID unicode access (web-client.rules) 7954 <-> Disabled <-> WEB-CLIENT Microsoft Forms 2.0 ComboBox ActiveX CLSID access (web-client.rules) 7955 <-> Disabled <-> WEB-CLIENT Microsoft Forms 2.0 ComboBox ActiveX CLSID unicode access (web-client.rules) 7956 <-> Disabled <-> WEB-CLIENT Microsoft Forms 2.0 ListBox ActiveX CLSID access (web-client.rules) 7957 <-> Disabled <-> WEB-CLIENT Microsoft Forms 2.0 ListBox ActiveX CLSID unicode access (web-client.rules) 7958 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7959 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7960 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7961 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7962 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7963 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7964 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7965 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7966 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7967 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7968 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules) 7969 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules) 7970 <-> Disabled <-> WEB-CLIENT PostBootReminder object ActiveX CLSID access (web-client.rules) 7971 <-> Disabled <-> WEB-CLIENT PostBootReminder object ActiveX CLSID unicode access (web-client.rules) 7972 <-> Disabled <-> WEB-CLIENT RealPlayer G2 Control ActiveX CLSID access (web-client.rules) 7973 <-> Disabled <-> WEB-CLIENT RealPlayer G2 Control ActiveX CLSID unicode access (web-client.rules) 7974 <-> Disabled <-> WEB-CLIENT Rendezvous Class ActiveX CLSID access (web-client.rules) 7975 <-> Disabled <-> WEB-CLIENT Rendezvous Class ActiveX CLSID unicode access (web-client.rules) 7976 <-> Disabled <-> WEB-CLIENT ShellFolder for CD Burning ActiveX CLSID access (web-client.rules) 7977 <-> Disabled <-> WEB-CLIENT ShellFolder for CD Burning ActiveX CLSID unicode access (web-client.rules) 7978 <-> Disabled <-> WEB-CLIENT ShockwaveFlash.ShockwaveFlash ActiveX CLSID access (web-client.rules) 7979 <-> Disabled <-> WEB-CLIENT ShockwaveFlash.ShockwaveFlash ActiveX CLSID unicode access (web-client.rules) 7980 <-> Disabled <-> WEB-CLIENT ShockwaveFlash.ShockwaveFlash.9 ActiveX function call access (web-client.rules) 7981 <-> Disabled <-> WEB-CLIENT Snapshot Viewer General Property Page Object ActiveX CLSID access (web-client.rules) 7982 <-> Disabled <-> WEB-CLIENT Snapshot Viewer General Property Page Object ActiveX CLSID unicode access (web-client.rules) 7983 <-> Disabled <-> WEB-CLIENT SuperBuddy Class ActiveX CLSID access (web-client.rules) 7984 <-> Disabled <-> WEB-CLIENT SuperBuddy Class ActiveX CLSID unicode access (web-client.rules) 7985 <-> Disabled <-> WEB-CLIENT WebViewFolderIcon.WebViewFolderIcon.1 ActiveX CLSID access (web-client.rules) 7986 <-> Disabled <-> WEB-CLIENT WebViewFolderIcon.WebViewFolderIcon.1 ActiveX CLSID unicode access (web-client.rules) 7987 <-> Disabled <-> WEB-CLIENT WebViewFolderIcon.WebViewFolderIcon.2 ActiveX CLSID access (web-client.rules) 7988 <-> Disabled <-> WEB-CLIENT WebViewFolderIcon.WebViewFolderIcon.2 ActiveX CLSID unicode access (web-client.rules) 7989 <-> Disabled <-> WEB-CLIENT WIA FileSystem USD ActiveX CLSID access (web-client.rules) 7990 <-> Disabled <-> WEB-CLIENT WIA FileSystem USD ActiveX CLSID unicode access (web-client.rules) 7991 <-> Disabled <-> WEB-CLIENT ACM Class Manager ActiveX CLSID access (web-client.rules) 7992 <-> Disabled <-> WEB-CLIENT ACM Class Manager ActiveX CLSID unicode access (web-client.rules) 7993 <-> Disabled <-> WEB-CLIENT clbcatex.dll ActiveX CLSID access (web-client.rules) 7994 <-> Disabled <-> WEB-CLIENT clbcatex.dll ActiveX CLSID unicode access (web-client.rules) 7995 <-> Disabled <-> WEB-CLIENT clbcatq.dll ActiveX CLSID access (web-client.rules) 7996 <-> Disabled <-> WEB-CLIENT clbcatq.dll ActiveX CLSID unicode access (web-client.rules) 7997 <-> Disabled <-> WEB-CLIENT CLSID_ApprenticeICW ActiveX CLSID access (web-client.rules) 7998 <-> Disabled <-> WEB-CLIENT CLSID_ApprenticeICW ActiveX CLSID unicode access (web-client.rules) 7999 <-> Disabled <-> WEB-CLIENT CLSID_CDIDeviceActionConfigPage ActiveX CLSID access (web-client.rules) 8000 <-> Disabled <-> WEB-CLIENT CLSID_CDIDeviceActionConfigPage ActiveX CLSID unicode access (web-client.rules) 8001 <-> Disabled <-> WEB-CLIENT CommunicationManager ActiveX CLSID access (web-client.rules) 8002 <-> Disabled <-> WEB-CLIENT CommunicationManager ActiveX CLSID unicode access (web-client.rules) 8003 <-> Disabled <-> WEB-CLIENT Content.mbcontent.1 ActiveX CLSID access (web-client.rules) 8004 <-> Disabled <-> WEB-CLIENT Content.mbcontent.1 ActiveX CLSID unicode access (web-client.rules) 8005 <-> Disabled <-> WEB-CLIENT DiskManagement.Connection ActiveX CLSID access (web-client.rules) 8006 <-> Disabled <-> WEB-CLIENT DiskManagement.Connection ActiveX CLSID unicode access (web-client.rules) 8007 <-> Disabled <-> WEB-CLIENT Dutch_Dutch Stemmer ActiveX CLSID access (web-client.rules) 8008 <-> Disabled <-> WEB-CLIENT Dutch_Dutch Stemmer ActiveX CLSID unicode access (web-client.rules) 8009 <-> Disabled <-> WEB-CLIENT English_UK Stemmer ActiveX CLSID access (web-client.rules) 8010 <-> Disabled <-> WEB-CLIENT English_UK Stemmer ActiveX CLSID unicode access (web-client.rules) 8011 <-> Disabled <-> WEB-CLIENT English_US Stemmer ActiveX CLSID access (web-client.rules) 8012 <-> Disabled <-> WEB-CLIENT English_US Stemmer ActiveX CLSID unicode access (web-client.rules) 8013 <-> Disabled <-> WEB-CLIENT French_French Stemmer ActiveX CLSID access (web-client.rules) 8014 <-> Disabled <-> WEB-CLIENT French_French Stemmer ActiveX CLSID unicode access (web-client.rules) 8015 <-> Disabled <-> WEB-CLIENT German_German Stemmer ActiveX CLSID access (web-client.rules) 8016 <-> Disabled <-> WEB-CLIENT German_German Stemmer ActiveX CLSID unicode access (web-client.rules) 8017 <-> Disabled <-> WEB-CLIENT ICM Class Manager ActiveX CLSID access (web-client.rules) 8018 <-> Disabled <-> WEB-CLIENT ICM Class Manager ActiveX CLSID unicode access (web-client.rules) 8019 <-> Disabled <-> WEB-CLIENT Internet Explorer Address Bar ActiveX CLSID access (web-client.rules) 8020 <-> Disabled <-> WEB-CLIENT Internet Explorer Address Bar ActiveX CLSID unicode access (web-client.rules) 8021 <-> Disabled <-> WEB-CLIENT ISSimpleCommandCreator.1 ActiveX CLSID access (web-client.rules) 8022 <-> Disabled <-> WEB-CLIENT ISSimpleCommandCreator.1 ActiveX CLSID unicode access (web-client.rules) 8023 <-> Disabled <-> WEB-CLIENT Italian_Italian Stemmer ActiveX CLSID access (web-client.rules) 8024 <-> Disabled <-> WEB-CLIENT Italian_Italian Stemmer ActiveX CLSID unicode access (web-client.rules) 8025 <-> Disabled <-> WEB-CLIENT Microsoft HTML Window Security Proxy ActiveX CLSID access (web-client.rules) 8026 <-> Disabled <-> WEB-CLIENT Microsoft HTML Window Security Proxy ActiveX CLSID unicode access (web-client.rules) 8027 <-> Disabled <-> WEB-CLIENT Microsoft WBEM Event Subsystem ActiveX CLSID access (web-client.rules) 8028 <-> Disabled <-> WEB-CLIENT Microsoft WBEM Event Subsystem ActiveX CLSID unicode access (web-client.rules) 8029 <-> Disabled <-> WEB-CLIENT MidiOut Class Manager ActiveX CLSID access (web-client.rules) 8030 <-> Disabled <-> WEB-CLIENT MidiOut Class Manager ActiveX CLSID unicode access (web-client.rules) 8031 <-> Disabled <-> WEB-CLIENT Mslablti.MarshalableTI.1 ActiveX CLSID access (web-client.rules) 8032 <-> Disabled <-> WEB-CLIENT Mslablti.MarshalableTI.1 ActiveX CLSID unicode access (web-client.rules) 8033 <-> Disabled <-> WEB-CLIENT QC.MessageMover.1 ActiveX CLSID access (web-client.rules) 8034 <-> Disabled <-> WEB-CLIENT QC.MessageMover.1 ActiveX CLSID unicode access (web-client.rules) 8035 <-> Disabled <-> WEB-CLIENT Spanish_Modern Stemmer ActiveX CLSID access (web-client.rules) 8036 <-> Disabled <-> WEB-CLIENT Spanish_Modern Stemmer ActiveX CLSID unicode access (web-client.rules) 8037 <-> Disabled <-> WEB-CLIENT Swedish_Default Stemmer ActiveX CLSID access (web-client.rules) 8038 <-> Disabled <-> WEB-CLIENT Swedish_Default Stemmer ActiveX CLSID unicode access (web-client.rules) 8039 <-> Disabled <-> WEB-CLIENT syncui.dll ActiveX CLSID access (web-client.rules) 8040 <-> Disabled <-> WEB-CLIENT syncui.dll ActiveX CLSID unicode access (web-client.rules) 8041 <-> Disabled <-> WEB-CLIENT VFW Capture Class Manager ActiveX CLSID access (web-client.rules) 8042 <-> Disabled <-> WEB-CLIENT VFW Capture Class Manager ActiveX CLSID unicode access (web-client.rules) 8043 <-> Disabled <-> WEB-CLIENT Video Effect Class Manager 1 Input ActiveX CLSID access (web-client.rules) 8044 <-> Disabled <-> WEB-CLIENT Video Effect Class Manager 1 Input ActiveX CLSID unicode access (web-client.rules) 8045 <-> Disabled <-> WEB-CLIENT Video Effect Class Manager 2 Input ActiveX CLSID access (web-client.rules) 8046 <-> Disabled <-> WEB-CLIENT Video Effect Class Manager 2 Input ActiveX CLSID unicode access (web-client.rules) 8047 <-> Disabled <-> WEB-CLIENT WaveIn Class Manager ActiveX CLSID access (web-client.rules) 8048 <-> Disabled <-> WEB-CLIENT WaveIn Class Manager ActiveX CLSID unicode access (web-client.rules) 8049 <-> Disabled <-> WEB-CLIENT WaveOut and DSound Class Manager ActiveX CLSID access (web-client.rules) 8050 <-> Disabled <-> WEB-CLIENT WaveOut and DSound Class Manager ActiveX CLSID unicode access (web-client.rules) 8051 <-> Disabled <-> WEB-CLIENT WDM Instance Provider ActiveX CLSID access (web-client.rules) 8052 <-> Disabled <-> WEB-CLIENT WDM Instance Provider ActiveX CLSID unicode access (web-client.rules) 8053 <-> Disabled <-> WEB-CLIENT DirectAnimation.PathControl ActiveX CLSID access (web-client.rules) 8054 <-> Disabled <-> WEB-CLIENT DirectAnimation.PathControl ActiveX CLSID unicode access (web-client.rules) 8055 <-> Disabled <-> WEB-CLIENT DirectAnimation.PathControl ActiveX function call access (web-client.rules) 8058 <-> Disabled <-> WEB-CLIENT Mozilla javascript navigator object access (web-client.rules) 8061 <-> Disabled <-> WEB-CLIENT ADODB.Stream ActiveX CLSID access (web-client.rules) 8062 <-> Disabled <-> WEB-CLIENT ADODB.Stream ActiveX CLSID unicode access (web-client.rules) 8063 <-> Disabled <-> WEB-CLIENT ADODB.Stream ActiveX function call access (web-client.rules) 8064 <-> Disabled <-> WEB-CLIENT Scriptlet.Typelib ActiveX CLSID access (web-client.rules) 8065 <-> Disabled <-> WEB-CLIENT Scriptlet.Typelib ActiveX CLSID unicode access (web-client.rules) 8066 <-> Disabled <-> WEB-CLIENT Windows Scripting Host Shell ActiveX CLSID access (web-client.rules) 8067 <-> Disabled <-> WEB-CLIENT Windows Scripting Host Shell ActiveX CLSID unicode access (web-client.rules) 8068 <-> Disabled <-> WEB-CLIENT Windows Scripting Host Shell ActiveX function call access (web-client.rules) 8069 <-> Disabled <-> WEB-CLIENT Microsoft Virtual Machine ActiveX CLSID access (web-client.rules) 8070 <-> Disabled <-> WEB-CLIENT Microsoft Virtual Machine ActiveX CLSID unicode access (web-client.rules) 8091 <-> Disabled <-> WEB-CLIENT RealPlayer Realpix file format string overflow attempt (web-client.rules) 8363 <-> Disabled <-> WEB-CLIENT Business Object Factory ActiveX CLSID access (web-client.rules) 8364 <-> Disabled <-> WEB-CLIENT Business Object Factory ActiveX CLSID unicode access (web-client.rules) 8365 <-> Disabled <-> WEB-CLIENT DExplore.AppObj.8.0 ActiveX CLSID access (web-client.rules) 8366 <-> Disabled <-> WEB-CLIENT DExplore.AppObj.8.0 ActiveX CLSID unicode access (web-client.rules) 8367 <-> Disabled <-> WEB-CLIENT Microsoft.DbgClr.DTE.8.0 ActiveX CLSID access (web-client.rules) 8368 <-> Disabled <-> WEB-CLIENT Microsoft.DbgClr.DTE.8.0 ActiveX CLSID unicode access (web-client.rules) 8369 <-> Disabled <-> WEB-CLIENT WMIScriptUtils.WMIObjectBroker2.1 ActiveX CLSID access (web-client.rules) 8370 <-> Disabled <-> WEB-CLIENT WMIScriptUtils.WMIObjectBroker2.1 ActiveX CLSID unicode access (web-client.rules) 8371 <-> Disabled <-> WEB-CLIENT Outlook.Application ActiveX CLSID access (web-client.rules) 8372 <-> Disabled <-> WEB-CLIENT Outlook.Application ActiveX CLSID unicode access (web-client.rules) 8373 <-> Disabled <-> WEB-CLIENT VsmIDE.DTE ActiveX CLSID access (web-client.rules) 8374 <-> Disabled <-> WEB-CLIENT VsmIDE.DTE ActiveX CLSID unicode access (web-client.rules) 8375 <-> Disabled <-> WEB-CLIENT QuickTime Object ActiveX CLSID access (web-client.rules) 8376 <-> Disabled <-> WEB-CLIENT QuickTime Object ActiveX CLSID unicode access (web-client.rules) 8377 <-> Disabled <-> WEB-CLIENT RealPlayer Download Handler ActiveX CLSID access (web-client.rules) 8378 <-> Disabled <-> WEB-CLIENT RealPlayer Download Handler ActiveX CLSID unicode access (web-client.rules) 8379 <-> Disabled <-> WEB-CLIENT Xml2Dex ActiveX CLSID access (web-client.rules) 8380 <-> Disabled <-> WEB-CLIENT Xml2Dex ActiveX CLSID unicode access (web-client.rules) 8381 <-> Disabled <-> WEB-CLIENT RealPlayer SMIL Download Handler ActiveX CLSID access (web-client.rules) 8382 <-> Disabled <-> WEB-CLIENT RealPlayer SMIL Download Handler ActiveX CLSID unicode access (web-client.rules) 8383 <-> Disabled <-> WEB-CLIENT RealPlayer RAM Download Handler ActiveX CLSID access (web-client.rules) 8384 <-> Disabled <-> WEB-CLIENT RealPlayer RAM Download Handler ActiveX CLSID unicode access (web-client.rules) 8385 <-> Disabled <-> WEB-CLIENT RealPlayer Playback Handler ActiveX CLSID access (web-client.rules) 8386 <-> Disabled <-> WEB-CLIENT RealPlayer Playback Handler ActiveX CLSID unicode access (web-client.rules) 8387 <-> Disabled <-> WEB-CLIENT RealPlayer RNX Download Handler ActiveX CLSID access (web-client.rules) 8388 <-> Disabled <-> WEB-CLIENT RealPlayer RNX Download Handler ActiveX CLSID unicode access (web-client.rules) 8389 <-> Disabled <-> WEB-CLIENT RealPlayer RMP Download Handler ActiveX CLSID access (web-client.rules) 8390 <-> Disabled <-> WEB-CLIENT RealPlayer RMP Download Handler ActiveX CLSID unicode access (web-client.rules) 8391 <-> Disabled <-> WEB-CLIENT RFXInstMgr Class ActiveX CLSID access (web-client.rules) 8392 <-> Disabled <-> WEB-CLIENT RFXInstMgr Class ActiveX CLSID unicode access (web-client.rules) 8393 <-> Disabled <-> WEB-CLIENT WebDetectFrm ActiveX CLSID access (web-client.rules) 8394 <-> Disabled <-> WEB-CLIENT WebDetectFrm ActiveX CLSID unicode access (web-client.rules) 8395 <-> Disabled <-> WEB-CLIENT DX3DTransform.Microsoft.CrShatter ActiveX CLSID access (web-client.rules) 8396 <-> Disabled <-> WEB-CLIENT DX3DTransform.Microsoft.CrShatter ActiveX CLSID unicode access (web-client.rules) 8397 <-> Disabled <-> WEB-CLIENT Microsoft Office List 11.0 ActiveX CLSID access (web-client.rules) 8398 <-> Disabled <-> WEB-CLIENT Microsoft Office List 11.0 ActiveX CLSID unicode access (web-client.rules) 8399 <-> Disabled <-> WEB-CLIENT Microsoft.WebCapture ActiveX CLSID access (web-client.rules) 8400 <-> Disabled <-> WEB-CLIENT Microsoft.WebCapture ActiveX CLSID unicode access (web-client.rules) 8401 <-> Disabled <-> WEB-CLIENT Windows Media Services DRM Storage ActiveX CLSID access (web-client.rules) 8402 <-> Disabled <-> WEB-CLIENT Windows Media Services DRM Storage ActiveX CLSID unicode access (web-client.rules) 8403 <-> Disabled <-> WEB-CLIENT XML Schmea Cache 6.0 ActiveX CLSID access (web-client.rules) 8404 <-> Disabled <-> WEB-CLIENT XML Schmea Cache 6.0 ActiveX CLSID unicode access (web-client.rules) 8405 <-> Disabled <-> WEB-CLIENT XML HTTP 6.0 ActiveX CLSID access (web-client.rules) 8406 <-> Disabled <-> WEB-CLIENT XML HTTP 6.0 ActiveX CLSID unicode access (web-client.rules) 8407 <-> Disabled <-> WEB-CLIENT VisualExec Control ActiveX CLSID access (web-client.rules) 8408 <-> Disabled <-> WEB-CLIENT VisualExec Control ActiveX CLSID unicode access (web-client.rules) 8409 <-> Disabled <-> WEB-CLIENT RealPlayer Stream Handler ActiveX CLSID access (web-client.rules) 8410 <-> Disabled <-> WEB-CLIENT RealPlayer Stream Handler ActiveX CLSID unicode access (web-client.rules) 8411 <-> Disabled <-> WEB-CLIENT DocFind Command ActiveX CLSID access (web-client.rules) 8412 <-> Disabled <-> WEB-CLIENT DocFind Command ActiveX CLSID unicode access (web-client.rules) 8416 <-> Disabled <-> WEB-CLIENT VML fill method overflow attempt (web-client.rules) 8417 <-> Disabled <-> WEB-CLIENT TriEditDocument.TriEditDocument ActiveX function call access (web-client.rules) 8418 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.RevealTrans ActiveX function call access (web-client.rules) 8419 <-> Disabled <-> WEB-CLIENT WebViewFolderIcon.WebViewFolderIcon.1 ActiveX function call access (web-client.rules) 8420 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Gradient ActiveX function call access (web-client.rules) 8421 <-> Disabled <-> WEB-CLIENT OWC11.DataSourceControl.11 ActiveX function call access (web-client.rules) 8422 <-> Disabled <-> WEB-CLIENT OVCtl.OVCtl.1 ActiveX function call access (web-client.rules) 8423 <-> Disabled <-> WEB-CLIENT CEnroll.CEnroll.2 ActiveX function call access (web-client.rules) 8424 <-> Disabled <-> WEB-CLIENT Microsoft Forms 2.0 ListBox ActiveX function call access (web-client.rules) 8425 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.NDFXArtEffects ActiveX function call access (web-client.rules) 8448 <-> Disabled <-> WEB-CLIENT Excel colinfo XF record overflow attempt (web-client.rules)
