Think you have a false positive on this rule?

Sid 1-30308

Message

BLACKLIST User-Agent known malicious user agent - Win.Backdoor.Jolob

Summary

Impact

Detailed information

Affected systems

Ease of attack

False positives

False negatives

Corrective action

Upgrade to the latest non-affected version of the software.

Apply the appropriate vendor supplied patches.

Contributors

Additional References

  • www.virustotal.com/en/file/13f6b38eed1c156a6791bdb09af9cad0af94a39da7ad0cdca40073df3d4adc70/analysis/