TMS zl Module IPS/IDS Signature Reference Guide RLX.10.2.2.94

ProCurve TMS zl Module IPS/IDS Signature
Reference Guide Version RLX.10.2.2.94
607
Signature ID: 28065
Activity Related to P2PNetworking Spyware
Threat Level: Warning
Signature Description: P2PNetworking, also known as PeerEnabler, is an adware application often bundled with
packages such as kazaa as a file-distribution program. If one installs software that uses P2PNetworking for downloads,
the software itself may download content for your usage. Similarly, by using websites that have integrated PeerEnabler
downloads, you may download files. This event alert when packet sending to 3531 port, with first bit is 4b and data
only upto 3 bytes.
Signature ID: 28066
Activity Related to P2PNetworking Spyware
Threat Level: Warning
Signature Description: P2PNetworking, also known as PeerEnabler, is an adware application often bundled with
packages such as kazaa as a file-distribution program. If one installs software that uses P2PNetworking for downloads,
the software itself may download content for your usage. Similarly, by using websites that have integrated PeerEnabler
downloads, you may download files.
Signature ID: 28067
Spyware Clickspring site Vulnerability
Threat Level: Information
Signature Description: Spyware is a program or software that resides on an infected computer and collects various
information about the users without their informed consent. Clickspring is an adware, spyware and dialer application. It
monitors a user's online activity. It displays advertisements based on the data regarding surfing habits of the user. It
copy executable files themselves to the windows folder.
Signature ID: 28068
Adware Zango site Vulnerability(1)
Threat Level: Information
Signature Description: Adware or advertising-supported software is any software package which automatically plays,
displays, or downloads advertisements to a computer after the software is installed on it or while the application is
being used. Zango is an ad-delivery application. It monitors browser usage and delivers targeted advertisements as pop-
up windows to the user. This rule will trigger when the packet has a pattern 'Zango/ZangoInstaller'.
Signature ID: 28069
Adware Zango site Vulnerability(2)
Threat Level: Information
Signature Description: Adware or advertising-supported software is any software package which automatically plays,
displays, or downloads advertisements to a computer after the software is installed on it or while the application is
being used. Zango is an ad-delivery application. It monitors browser usage and delivers targeted advertisements as pop-
up windows to the user. This rule will trigger when the packet has a pattern 'ZangoTBInstaller.exe'.
Signature ID: 28070
Adware Zango site Vulnerability(3)
Threat Level: Information
Signature Description: Adware or advertising-supported software is any software package which automatically plays,
displays, or downloads advertisements to a computer after the software is installed on it or while the application is
being used. Zango is an ad-delivery application. It monitors browser usage and delivers targeted advertisements as pop-
up windows to the user. This rule will trigger when the packet has a pattern 'php/rpc_uci.php'.