TMS zl Module IPS/IDS Signature Reference Guide RLX.10.2.2.94

ProCurve TMS zl Module IPS/IDS Signature
Reference Guide Version RLX.10.2.2.94
599
serious vulnerability which should be fixed immediately. It installs hbinst.exe which is considered to be a security risk,
not only because spyware removal programs flag HotBar as spyware, but also because a number of users have
complained about its performance. Delaying the removal of hbinst.exe may cause serious harm to your system and will
likely cause a number of problems, such as slow performance, loss of data or leaking private information. This
signature detects when the packet has pattern 'install/startInstallprocess.asp?Defau'.
Signature ID: 28020
Access to spyware Hotbar Install site vulnerability(2)
Threat Level: Information
Signature Description: The systems are directed to a site that is capable of installing malwares in the systems.
Malwares are the softwares that pass user's activities to external sites. HotBar is a spyware and as such, presents a
serious vulnerability which should be fixed immediately. It installs hbinst.exe which is considered to be a security risk,
not only because spyware removal programs flag HotBar as spyware, but also because a number of users have
complained about its performance. Delaying the removal of hbinst.exe may cause serious harm to your system and will
likely cause a number of problems, such as slow performance, loss of data or leaking private information. This
signature detects when the packet has pattern 'install/process/upsale/hotbar'.
Signature ID: 28021
Access to spyware Hotbar Install site Vulnerability(3)
Threat Level: Information
Signature Description: The systems are directed to a site that is capable of installing malwares in the systems.
Malwares are the softwares that pass user's activities to external sites. HotBar is a spyware and as such, presents a
serious vulnerability which should be fixed immediately. It installs hbinst.exe which is considered to be a security risk,
not only because spyware removal programs flag HotBar as spyware, but also because a number of users have
complained about its performance. Delaying the removal of hbinst.exe may cause serious harm to your system and will
likely cause a number of problems, such as slow performance, loss of data or leaking private information. This
signature detects when the packet has pattern 'installs/hotbar/programs'.
Signature ID: 28022
Access to spyware Hotbar agent reporting Vulnerability
Threat Level: Information
Signature Description: The systems are directed to a site that is capable of installing malwares in the systems.
Malwares are the softwares that pass user's activities to external sites. HotBar is a spyware and as such, presents a
serious vulnerability which should be fixed immediately. It installs hbinst.exe which is considered to be a security risk,
not only because spyware removal programs flag HotBar as spyware, but also because a number of users have
complained about its performance. Delaying the removal of hbinst.exe may cause serious harm to your system and will
likely cause a number of problems, such as slow performance, loss of data or leaking private information. This
Signature detects when packet has pattern 'reports/hotbar'.
Signature ID: 28023
Access to spyware Hotbar agent upgrading Vulnerability
Threat Level: Information
Signature Description: The systems are directed to a site that is capable of installing malwares in the systems.
Malwares are the softwares that pass user's activities to external sites. HotBar is a spyware and as such, presents a
serious vulnerability which should be fixed immediately. It installs hbinst.exe which considered to be a security risk,
not only because spyware removal programs flag HotBar as spyware, but also because a number of users have
complained about its performance. Delaying the removal of hbinst.exe may cause serious harm to your system and will
likely cause a number of problems, such as slow performance, loss of data or leaking private information. This
signature detects when the packet has pattern 'updates/hotbar'.