TMS zl Module IPS/IDS Signature Reference Guide RLX.10.2.2.94

ProCurve TMS zl Module IPS/IDS Signature
Reference Guide Version RLX.10.2.2.94
612
Signature ID: 28093
Access to adware WinAd site Vulnerability
Threat Level: Warning
Signature Description: WinAD is an adware program (advertising oriented spyware) for Microsoft Windows operating
systems. It is adware trojan that hijacks victim browsers and forces them to display popup ads based on keywords in the
sites they are visiting. It monitors browser usage and accordingly delivers targeted advertisements. The program opens
advertisements during a user's Internet Explorer browsing session by downloading them from a server. WinAD may
replace the ads from other companies with its own. This signature will generate log when the attacker send to
mtrslib2.js.
Signature ID: 28094
Access to adware iframebiz site Vulnerability
Threat Level: Warning
Signature Description: Adware a well-known adware trojan that hijacks victim browsers and forces them to display
popup ads based on keywords in the sites they are visiting. It monitors browser usage and accordingly delivers targeted
advertisements.
Signature ID: 28095
Activity Related to Spyware Zenotecnico Vulnerability
Threat Level: Warning
Signature Description: Adware is an advertising software, displays third-party advertising on the computer. The ads
can take several forms, including pop-ups, pop-unders, banners, or links embedded within web pages or parts of the
Windows interface. It monitors browser usage and accordingly delivers targeted advertisements. The most annoying
part of this adware is to show invalid images without a user requesting any such materials.
Signature ID: 28096
Activity Related to Spyware Yupsearch.com Vulnerability(1)
Threat Level: Information
Signature Description: Spyware is a program or software that resides on an infected computer and collects various
<br>information about the users without their informed consent. Yupsearch is a spyware and adwares that pops up ads.
It monitors browser usage and accordingly delivers targeted advertisements. It shows the sexually-exploit images
without a user requesting. This rule will trigger when the attack packet has a pattern 'protector.exe'.
Signature ID: 28097
Activity Related to Spyware Yupsearch.com Vulnerability(2)
Threat Level: Information
Signature Description: Spyware is a program or software that resides on an infected computer and collects various
<br>information about the users without their informed consent. Yupsearch is a spyware and adwares that pops up ads.
It monitors browser usage and accordingly delivers targeted advertisements. It shows the sexually-exploit images
without a user requesting. This rule will trigger when the attack packet has a pattern 'sideb.exe'.
Signature ID: 28098
Activity Related to Spyware Windupdates Vulnerability
Threat Level: Warning
Signature Description: This comes under spyware and adwares that pops up ads. It monitors browser usage and
accordingly delivers targeted advertisements. Wind Updates may install 180search Assistant, Internet Optimizer, Top
Rebates, and Target Saver.