Sourcefire VRT Update

Date: 2006-11-06

This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack.

The format of the file is:

sid - Message (rule group)

New rules:
8496 <-> Enabled  <-> MS-SQL sp_oacreate unicode vulnerable function attempt (sql.rules)
8497 <-> Enabled  <-> MS-SQL sp_oacreate vulnerable function attempt (sql.rules)
8498 <-> Enabled  <-> MS-SQL/SMB sp_oacreate unicode vulnerable function attempt (sql.rules)
8499 <-> Enabled  <-> MS-SQL xp_displayparamstmt unicode vulnerable function attempt (sql.rules)
8500 <-> Enabled  <-> MS-SQL/SMB xp_displayparamstmt unicode vulnerable function attempt (sql.rules)
8501 <-> Enabled  <-> MS-SQL xp_displayparamstmt vulnerable function attempt (sql.rules)
8502 <-> Enabled  <-> MS-SQL xp_enumresultset unicode vulnerable function attempt (sql.rules)
8503 <-> Enabled  <-> MS-SQL/SMB xp_enumresultset unicode vulnerable function attempt (sql.rules)
8504 <-> Enabled  <-> MS-SQL xp_enumresultset vulnerable function attempt (sql.rules)
8505 <-> Enabled  <-> MS-SQL xp_oadestroy unicode vulnerable function attempt (sql.rules)
8506 <-> Enabled  <-> MS-SQL/SMB xp_oadestroy unicode vulnerable function attempt (sql.rules)
8507 <-> Enabled  <-> MS-SQL xp_oadestroy vulnerable function attempt (sql.rules)
8508 <-> Enabled  <-> MS-SQL xp_oagetproperty unicode vulnerable function attempt (sql.rules)
8509 <-> Enabled  <-> MS-SQL/SMB xp_oagetproperty unicode vulnerable function attempt (sql.rules)
8510 <-> Enabled  <-> MS-SQL xp_oagetproperty vulnerable function attempt (sql.rules)
8511 <-> Enabled  <-> MS-SQL xp_oamethod unicode vulnerable function attempt (sql.rules)
8512 <-> Enabled  <-> MS-SQL xp_oamethod vulnerable function attempt (sql.rules)
8513 <-> Enabled  <-> MS-SQL/SMB xp_oamethod unicode vulnerable function attempt (sql.rules)
8514 <-> Enabled  <-> MS-SQL xp_oasetproperty unicode vulnerable function attempt (sql.rules)
8515 <-> Enabled  <-> MS-SQL/SMB xp_oasetproperty unicode vulnerable function attempt (sql.rules)
8516 <-> Enabled  <-> MS-SQL xp_oasetproperty vulnerable function attempt (sql.rules)
8517 <-> Enabled  <-> MS-SQL xp_peekqueue unicode vulnerable function attempt (sql.rules)
8518 <-> Enabled  <-> MS-SQL/SMB xp_peekqueue unicode vulnerable function attempt (sql.rules)
8519 <-> Enabled  <-> MS-SQL xp_peekqueue vulnerable function attempt (sql.rules)
8520 <-> Enabled  <-> MS-SQL xp_printstatements unicode vulnerable function attempt (sql.rules)
8521 <-> Enabled  <-> MS-SQL/SMB xp_printstatements unicode vulnerable function attempt (sql.rules)
8522 <-> Enabled  <-> MS-SQL xp_printstatements vulnerable function attempt (sql.rules)
8523 <-> Enabled  <-> MS-SQL xp_proxiedmetadata unicode vulnerable function attempt (sql.rules)
8524 <-> Enabled  <-> MS-SQL/SMB xp_proxiedmetadata unicode vulnerable function attempt (sql.rules)
8525 <-> Enabled  <-> MS-SQL xp_proxiedmetadata vulnerable function attempt (sql.rules)
8526 <-> Enabled  <-> MS-SQL xp_SetSQLSecurity unicode vulnerable function attempt (sql.rules)
8527 <-> Enabled  <-> MS-SQL/SMB xp_SetSQLSecurity unicode vulnerable function attempt (sql.rules)
8528 <-> Enabled  <-> MS-SQL xp_SetSQLSecurity vulnerable function attempt (sql.rules)
8529 <-> Enabled  <-> MS-SQL xp_showcolv unicode vulnerable function attempt (sql.rules)
8530 <-> Enabled  <-> MS-SQL/SMB xp_showcolv unicode vulnerable function attempt (sql.rules)
8531 <-> Enabled  <-> MS-SQL xp_showcolv vulnerable function attempt (sql.rules)
8532 <-> Enabled  <-> MS-SQL xp_sqlagent_monitor unicode vulnerable function attempt (sql.rules)
8533 <-> Enabled  <-> MS-SQL xp_sqlagent_monitor vulnerable function attempt (sql.rules)
8534 <-> Enabled  <-> MS-SQL/SMB xp_sqlagent_monitor unicode vulnerable function attempt (sql.rules)
8535 <-> Enabled  <-> MS-SQL xp_sqlinventory unicode vulnerable function attempt (sql.rules)
8536 <-> Enabled  <-> MS-SQL xp_sqlinventory vulnerable function attempt (sql.rules)
8537 <-> Enabled  <-> MS-SQL/SMB xp_sqlinventory unicode vulnerable function attempt (sql.rules)
8538 <-> Enabled  <-> MS-SQL xp_updatecolvbm unicode vulnerable function attempt (sql.rules)
8539 <-> Enabled  <-> MS-SQL/SMB xp_updatecolvbm unicode vulnerable function attempt (sql.rules)
8540 <-> Enabled  <-> MS-SQL xp_updatecolvbm vulnerable function attempt (sql.rules)
8541 <-> Enabled  <-> ORACLE sdo_cs.transform_layer buffer overflow attempt (oracle.rules)
8542 <-> Disabled <-> SPYWARE-PUT Trackware deluxecommunications runtime detection - collect info (spyware-put.rules)
8543 <-> Disabled <-> SPYWARE-PUT Trackware deluxecommunications runtime detection - display popup ads (spyware-put.rules)
8544 <-> Disabled <-> SPYWARE-PUT Keylogger nicespy runtime detection - smtp (spyware-put.rules)
8545 <-> Disabled <-> SPYWARE-PUT Adware roogoo runtime detection - surfing monitor (spyware-put.rules)
8546 <-> Disabled <-> SPYWARE-PUT Adware roogoo runtime detection - show ads (spyware-put.rules)
8547 <-> Disabled <-> BACKDOOR zzmm 2.0 runtime detection - init connection (backdoor.rules)
8548 <-> Disabled <-> BACKDOOR zzmm 2.0 runtime detection - init connection (backdoor.rules)
8549 <-> Disabled <-> BACKDOOR zxshell runtime detection - setting information retrieve (backdoor.rules)
8550 <-> Enabled  <-> ORACLE dbms_mview.register_mview buffer overflow attempt (oracle.rules)
8551 <-> Enabled  <-> ORACLE dbms_mview.unregister_mview buffer overflow attempt (oracle.rules)
8552 <-> Enabled  <-> NETBIOS SMB-DS IActivation unicode little endian bind attempt (netbios.rules)
8553 <-> Enabled  <-> NETBIOS SMB-DS IActivation WriteAndX unicode bind attempt (netbios.rules)
8554 <-> Enabled  <-> NETBIOS SMB IActivation bind attempt (netbios.rules)
8555 <-> Enabled  <-> NETBIOS SMB IActivation WriteAndX unicode little endian alter context attempt (netbios.rules)
8556 <-> Enabled  <-> NETBIOS SMB-DS IActivation little endian alter context attempt (netbios.rules)
8557 <-> Enabled  <-> NETBIOS SMB-DS IActivation WriteAndX little endian alter context attempt (netbios.rules)
8558 <-> Enabled  <-> NETBIOS SMB-DS IActivation unicode little endian alter context attempt (netbios.rules)
8559 <-> Enabled  <-> NETBIOS SMB-DS IActivation WriteAndX unicode alter context attempt (netbios.rules)
8560 <-> Enabled  <-> NETBIOS SMB IActivation alter context attempt (netbios.rules)
8561 <-> Enabled  <-> NETBIOS SMB IActivation WriteAndX bind attempt (netbios.rules)
8562 <-> Enabled  <-> NETBIOS SMB IActivation unicode bind attempt (netbios.rules)
8563 <-> Enabled  <-> NETBIOS SMB IActivation WriteAndX unicode bind attempt (netbios.rules)
8564 <-> Enabled  <-> NETBIOS SMB-DS IActivation bind attempt (netbios.rules)
8565 <-> Enabled  <-> NETBIOS SMB-DS IActivation WriteAndX bind attempt (netbios.rules)
8566 <-> Enabled  <-> NETBIOS SMB-DS IActivation unicode bind attempt (netbios.rules)
8567 <-> Enabled  <-> NETBIOS SMB IActivation WriteAndX alter context attempt (netbios.rules)
8568 <-> Enabled  <-> NETBIOS SMB IActivation unicode andx alter context attempt (netbios.rules)
8569 <-> Enabled  <-> NETBIOS SMB IActivation WriteAndX unicode andx alter context attempt (netbios.rules)
8570 <-> Enabled  <-> NETBIOS SMB-DS IActivation andx alter context attempt (netbios.rules)
8571 <-> Enabled  <-> NETBIOS SMB-DS IActivation WriteAndX andx alter context attempt (netbios.rules)
8572 <-> Enabled  <-> NETBIOS SMB-DS IActivation unicode andx alter context attempt (netbios.rules)
8573 <-> Enabled  <-> NETBIOS SMB-DS IActivation WriteAndX unicode little endian andx alter context attempt (netbios.rules)
8574 <-> Enabled  <-> NETBIOS SMB IActivation little endian andx alter context attempt (netbios.rules)
8575 <-> Enabled  <-> NETBIOS SMB IActivation WriteAndX little endian andx alter context attempt (netbios.rules)
8576 <-> Enabled  <-> NETBIOS SMB IActivation unicode little endian andx alter context attempt (netbios.rules)
8577 <-> Enabled  <-> NETBIOS SMB-DS IActivation WriteAndX unicode little endian andx bind attempt (netbios.rules)
8578 <-> Enabled  <-> NETBIOS SMB IActivation little endian andx bind attempt (netbios.rules)
8579 <-> Enabled  <-> NETBIOS SMB IActivation WriteAndX little endian andx bind attempt (netbios.rules)
8580 <-> Enabled  <-> NETBIOS SMB IActivation unicode little endian andx bind attempt (netbios.rules)
8581 <-> Enabled  <-> NETBIOS SMB IActivation WriteAndX unicode little endian andx bind attempt (netbios.rules)
8582 <-> Enabled  <-> NETBIOS SMB-DS IActivation little endian andx bind attempt (netbios.rules)
8583 <-> Enabled  <-> NETBIOS SMB-DS IActivation WriteAndX little endian andx bind attempt (netbios.rules)
8584 <-> Enabled  <-> NETBIOS SMB-DS IActivation unicode little endian andx bind attempt (netbios.rules)
8585 <-> Enabled  <-> NETBIOS SMB-DS IActivation WriteAndX unicode andx bind attempt (netbios.rules)
8586 <-> Enabled  <-> NETBIOS SMB IActivation andx bind attempt (netbios.rules)
8587 <-> Enabled  <-> NETBIOS SMB IActivation WriteAndX unicode little endian andx alter context attempt (netbios.rules)
8588 <-> Enabled  <-> NETBIOS SMB-DS IActivation little endian andx alter context attempt (netbios.rules)
8589 <-> Enabled  <-> NETBIOS SMB-DS IActivation WriteAndX little endian andx alter context attempt (netbios.rules)
8590 <-> Enabled  <-> NETBIOS SMB-DS IActivation unicode little endian andx alter context attempt (netbios.rules)
8591 <-> Enabled  <-> NETBIOS SMB-DS IActivation WriteAndX unicode andx alter context attempt (netbios.rules)
8592 <-> Enabled  <-> NETBIOS SMB IActivation andx alter context attempt (netbios.rules)
8593 <-> Enabled  <-> NETBIOS SMB IActivation WriteAndX andx bind attempt (netbios.rules)
8594 <-> Enabled  <-> NETBIOS SMB IActivation unicode andx bind attempt (netbios.rules)
8595 <-> Enabled  <-> NETBIOS SMB IActivation WriteAndX unicode andx bind attempt (netbios.rules)
8596 <-> Enabled  <-> NETBIOS SMB-DS IActivation andx bind attempt (netbios.rules)
8597 <-> Enabled  <-> NETBIOS SMB-DS IActivation WriteAndX andx bind attempt (netbios.rules)
8598 <-> Enabled  <-> NETBIOS SMB-DS IActivation unicode andx bind attempt (netbios.rules)
8599 <-> Enabled  <-> NETBIOS SMB IActivation WriteAndX andx alter context attempt (netbios.rules)
8600 <-> Disabled <-> NETBIOS DCERPC NCACN-HTTP IActivation alter context attempt (netbios.rules)
8601 <-> Enabled  <-> NETBIOS DCERPC NCACN-IP-TCP IActivation alter context attempt (netbios.rules)
8602 <-> Disabled <-> NETBIOS DCERPC NCACN-HTTP IActivation little endian alter context attempt (netbios.rules)
8603 <-> Enabled  <-> NETBIOS DCERPC NCACN-IP-TCP IActivation little endian alter context attempt (netbios.rules)
8604 <-> Disabled <-> NETBIOS DCERPC NCACN-HTTP IActivation bind attempt (netbios.rules)
8605 <-> Enabled  <-> NETBIOS DCERPC NCACN-IP-TCP IActivation bind attempt (netbios.rules)
8606 <-> Disabled <-> NETBIOS DCERPC NCACN-HTTP IActivation little endian bind attempt (netbios.rules)
8607 <-> Enabled  <-> NETBIOS DCERPC NCACN-IP-TCP IActivation little endian bind attempt (netbios.rules)
8608 <-> Enabled  <-> NETBIOS SMB v4 IActivation remoteactivation little endian overflow attempt (netbios.rules)
8609 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation overflow attempt (netbios.rules)
8610 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation unicode overflow attempt (netbios.rules)
8611 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation little endian overflow attempt (netbios.rules)
8612 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX unicode little endian overflow attempt (netbios.rules)
8613 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation WriteAndX unicode overflow attempt (netbios.rules)
8614 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation WriteAndX overflow attempt (netbios.rules)
8615 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation unicode overflow attempt (netbios.rules)
8616 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX unicode overflow attempt (netbios.rules)
8617 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation overflow attempt (netbios.rules)
8618 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX overflow attempt (netbios.rules)
8619 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation little endian object call overflow attempt (netbios.rules)
8620 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation WriteAndX unicode little endian object call overflow attempt (netbios.rules)
8621 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation unicode little endian object call overflow attempt (netbios.rules)
8622 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX little endian object call overflow attempt (netbios.rules)
8623 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation WriteAndX little endian object call overflow attempt (netbios.rules)
8624 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation unicode little endian object call overflow attempt (netbios.rules)
8625 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation object call overflow attempt (netbios.rules)
8626 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation unicode object call overflow attempt (netbios.rules)
8627 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation little endian object call overflow attempt (netbios.rules)
8628 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX unicode little endian object call overflow attempt (netbios.rules)
8629 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation WriteAndX unicode object call overflow attempt (netbios.rules)
8630 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation WriteAndX object call overflow attempt (netbios.rules)
8631 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation unicode object call overflow attempt (netbios.rules)
8632 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX unicode object call overflow attempt (netbios.rules)
8633 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation object call overflow attempt (netbios.rules)
8634 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX object call overflow attempt (netbios.rules)
8635 <-> Enabled  <-> NETBIOS SMB-DS v4 IActivation remoteactivation WriteAndX little endian overflow attempt (netbios.rules)
8636 <-> Enabled  <-> NETBIOS SMB v4 IActivation remoteactivation WriteAndX little endian overflow attempt (netbios.rules)
8637 <-> Enabled  <-> NETBIOS SMB-DS v4 IActivation remoteactivation little endian overflow attempt (netbios.rules)
8638 <-> Enabled  <-> NETBIOS SMB-DS v4 IActivation remoteactivation WriteAndX unicode little endian overflow attempt (netbios.rules)
8639 <-> Enabled  <-> NETBIOS SMB v4 IActivation remoteactivation WriteAndX unicode overflow attempt (netbios.rules)
8640 <-> Enabled  <-> NETBIOS SMB-DS v4 IActivation remoteactivation unicode andx overflow attempt (netbios.rules)
8641 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation unicode little endian andx overflow attempt (netbios.rules)
8642 <-> Enabled  <-> NETBIOS SMB-DS v4 IActivation remoteactivation andx overflow attempt (netbios.rules)
8643 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation WriteAndX unicode little endian andx overflow attempt (netbios.rules)
8644 <-> Enabled  <-> NETBIOS SMB v4 IActivation remoteactivation andx overflow attempt (netbios.rules)
8645 <-> Enabled  <-> NETBIOS SMB v4 IActivation remoteactivation WriteAndX unicode little endian andx overflow attempt (netbios.rules)
8646 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation unicode little endian andx overflow attempt (netbios.rules)
8647 <-> Enabled  <-> NETBIOS SMB-DS v4 IActivation remoteactivation WriteAndX andx overflow attempt (netbios.rules)
8648 <-> Enabled  <-> NETBIOS SMB-DS v4 IActivation remoteactivation WriteAndX unicode andx overflow attempt (netbios.rules)
8649 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation little endian andx overflow attempt (netbios.rules)
8650 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX little endian andx overflow attempt (netbios.rules)
8651 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation WriteAndX little endian andx overflow attempt (netbios.rules)
8652 <-> Enabled  <-> NETBIOS SMB v4 IActivation remoteactivation unicode little endian andx overflow attempt (netbios.rules)
8653 <-> Enabled  <-> NETBIOS SMB-DS v4 IActivation remoteactivation unicode little endian andx overflow attempt (netbios.rules)
8654 <-> Enabled  <-> NETBIOS SMB v4 IActivation remoteactivation WriteAndX andx overflow attempt (netbios.rules)
8655 <-> Enabled  <-> NETBIOS SMB v4 IActivation remoteactivation unicode andx overflow attempt (netbios.rules)
8656 <-> Enabled  <-> NETBIOS SMB v4 IActivation remoteactivation little endian andx overflow attempt (netbios.rules)
8657 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation andx overflow attempt (netbios.rules)
8658 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation unicode andx overflow attempt (netbios.rules)
8659 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation little endian andx overflow attempt (netbios.rules)
8660 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX unicode little endian andx overflow attempt (netbios.rules)
8661 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation WriteAndX unicode andx overflow attempt (netbios.rules)
8662 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation WriteAndX andx overflow attempt (netbios.rules)
8663 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation unicode andx overflow attempt (netbios.rules)
8664 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX unicode andx overflow attempt (netbios.rules)
8665 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation andx overflow attempt (netbios.rules)
8666 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX andx overflow attempt (netbios.rules)
8667 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation little endian andx object call overflow attempt (netbios.rules)
8668 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation WriteAndX unicode little endian andx object call overflow attempt (netbios.rules)
8669 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation unicode little endian andx object call overflow attempt (netbios.rules)
8670 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX little endian andx object call overflow attempt (netbios.rules)
8671 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation WriteAndX little endian andx object call overflow attempt (netbios.rules)
8672 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation unicode little endian andx object call overflow attempt (netbios.rules)
8673 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation andx object call overflow attempt (netbios.rules)
8674 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation unicode andx object call overflow attempt (netbios.rules)
8675 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation little endian andx object call overflow attempt (netbios.rules)
8676 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX unicode little endian andx object call overflow attempt (netbios.rules)
8677 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation WriteAndX unicode andx object call overflow attempt (netbios.rules)
8678 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation WriteAndX andx object call overflow attempt (netbios.rules)
8679 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation unicode andx object call overflow attempt (netbios.rules)
8680 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX unicode andx object call overflow attempt (netbios.rules)
8681 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation andx object call overflow attempt (netbios.rules)
8682 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX andx object call overflow attempt (netbios.rules)
8683 <-> Enabled  <-> NETBIOS SMB-DS v4 IActivation remoteactivation WriteAndX little endian andx overflow attempt (netbios.rules)
8684 <-> Enabled  <-> NETBIOS SMB v4 IActivation remoteactivation WriteAndX little endian andx overflow attempt (netbios.rules)
8685 <-> Enabled  <-> NETBIOS SMB-DS v4 IActivation remoteactivation little endian andx overflow attempt (netbios.rules)
8686 <-> Enabled  <-> NETBIOS SMB-DS v4 IActivation remoteactivation WriteAndX unicode little endian andx overflow attempt (netbios.rules)
8687 <-> Enabled  <-> NETBIOS SMB v4 IActivation remoteactivation WriteAndX unicode andx overflow attempt (netbios.rules)
8688 <-> Disabled <-> NETBIOS DCERPC NCACN-HTTP v4 IActivation remoteactivation little endian overflow attempt (netbios.rules)
8689 <-> Disabled <-> NETBIOS DCERPC NCACN-HTTP IActivation remoteactivation little endian overflow attempt (netbios.rules)
8690 <-> Enabled  <-> NETBIOS DCERPC NCACN-IP-TCP IActivation remoteactivation little endian overflow attempt (netbios.rules)
8691 <-> Disabled <-> NETBIOS DCERPC NCACN-HTTP v4 IActivation remoteactivation overflow attempt (netbios.rules)
8692 <-> Enabled  <-> NETBIOS DCERPC NCACN-IP-TCP v4 IActivation remoteactivation overflow attempt (netbios.rules)
8693 <-> Disabled <-> NETBIOS DCERPC NCACN-HTTP IActivation remoteactivation overflow attempt (netbios.rules)
8694 <-> Enabled  <-> NETBIOS DCERPC NCACN-IP-TCP IActivation remoteactivation overflow attempt (netbios.rules)
8695 <-> Enabled  <-> NETBIOS DCERPC NCACN-IP-TCP v4 IActivation remoteactivation little endian overflow attempt (netbios.rules)
8696 <-> Disabled <-> NETBIOS DCERPC NCACN-HTTP IActivation remoteactivation little endian object call overflow attempt (netbios.rules)
8697 <-> Enabled  <-> NETBIOS DCERPC NCACN-IP-TCP IActivation remoteactivation little endian object call overflow attempt (netbios.rules)
8698 <-> Disabled <-> NETBIOS DCERPC NCACN-HTTP IActivation remoteactivation object call overflow attempt (netbios.rules)
8699 <-> Enabled  <-> NETBIOS DCERPC NCACN-IP-TCP IActivation remoteactivation object call overflow attempt (netbios.rules)
8700 <-> Enabled  <-> WEB-IIS ASP.NET 2.0 cross-site scripting attempt (web-iis.rules)
8701 <-> Disabled <-> WEB-MISC IceCast header buffer overflow attempt (web-misc.rules)
8702 <-> Enabled  <-> EXPLOIT IceCast header buffer overflow attempt (exploit.rules)
8703 <-> Enabled  <-> EXPLOIT IceCast header buffer overflow attempt (exploit.rules)
8704 <-> Disabled <-> SMTP YPOPS Banner (smtp.rules)
8705 <-> Disabled <-> SMTP YPOPS buffer overflow attempt (smtp.rules)
8706 <-> Disabled <-> EXPLOIT YPOPS buffer overflow attempt (exploit.rules)
8707 <-> Enabled  <-> FTP WZD-FTPD SITE arbitrary command execution attempt (ftp.rules)
8708 <-> Enabled  <-> WEB-PHP Wordpress cache_lastpostdate code injection attempt (web-php.rules)
8709 <-> Enabled  <-> DNS Windows NAT helper components tcp denail of service attempt (dns.rules)
8710 <-> Enabled  <-> DNS Windows NAT helper components udp denial of service attempt (dns.rules)
8711 <-> Disabled <-> WEB-ATTACK Novell eDirectory HTTP redirection buffer overflow attempt (web-misc.rules)
8712 <-> Enabled  <-> WEB-PHP cacti graph_image arbitrary command execution attempt (web-php.rules)
8713 <-> Enabled  <-> WEB-PHP cacti graph_image SQL injection attempt (web-php.rules)
8714 <-> Enabled  <-> WEB-PHP cacti graph_image SQL injection attempt (web-php.rules)
8715 <-> Enabled  <-> WEB-PHP cacti graph_image SQL injection attempt (web-php.rules)
8716 <-> Enabled  <-> WEB-PHP cacti graph_image SQL injection attempt (web-php.rules)
8717 <-> Disabled <-> WEB-CLIENT VsaIDE.DTE ActiveX CLSID access (web-client.rules)
8718 <-> Disabled <-> WEB-CLIENT VsaIDE.DTE ActiveX CLSID unicode access (web-client.rules)
8719 <-> Disabled <-> WEB-CLIENT VisualStudio.DTE.8.0 ActiveX CLSID access (web-client.rules)
8720 <-> Disabled <-> WEB-CLIENT VisualStudio.DTE.8.0 ActiveX CLSID unicode access (web-client.rules)
8721 <-> Disabled <-> WEB-CLIENT Outlook Data Object ActiveX CLSID access (web-client.rules)
8722 <-> Disabled <-> WEB-CLIENT Outlook Data Object ActiveX CLSID unicode access (web-client.rules)
8723 <-> Disabled <-> WEB-CLIENT Microsoft Office Data Source Control 11.0 ActiveX CLSID access (web-client.rules)
8724 <-> Disabled <-> WEB-CLIENT Microsoft Office Data Source Control 11.0 ActiveX CLSID unicode access (web-client.rules)
8725 <-> Disabled <-> WEB-CLIENT System Monitor ActiveX CLSID access (web-client.rules)
8726 <-> Disabled <-> WEB-CLIENT System Monitor ActiveX CLSID unicode access (web-client.rules)
8727 <-> Disabled <-> WEB-CLIENT XMLHTTP 4.0 ActiveX CLSID access (web-client.rules)
8728 <-> Disabled <-> WEB-CLIENT XMLHTTP 4.0 ActiveX CLSID unicode access (web-client.rules)

Updated rules:
 282 <-> Disabled <-> DELETED DOS arkiea backup (deleted.rules)
 500 <-> Disabled <-> MISC source route lssr (misc.rules)
 501 <-> Disabled <-> MISC source route lssre (misc.rules)
 502 <-> Disabled <-> MISC source route ssrr (misc.rules)
 523 <-> Disabled <-> BAD-TRAFFIC ip reserved bit set (bad-traffic.rules)
 528 <-> Disabled <-> BAD-TRAFFIC loopback traffic (bad-traffic.rules)
 619 <-> Disabled <-> SCAN cybercop os probe (scan.rules)
 621 <-> Disabled <-> SCAN FIN (scan.rules)
 623 <-> Disabled <-> SCAN NULL (scan.rules)
 624 <-> Disabled <-> SCAN SYN FIN (scan.rules)
 625 <-> Disabled <-> SCAN XMAS (scan.rules)
 674 <-> Disabled <-> DELETED MS-SQL xp_displayparamstmt possible buffer overflow (deleted.rules)
 675 <-> Disabled <-> DELETED MS-SQL xp_setsqlsecurity possible buffer overflow (deleted.rules)
 682 <-> Disabled <-> DELETED MS-SQL xp_enumresultset possible buffer overflow (deleted.rules)
 690 <-> Disabled <-> DELETED MS-SQL/SMB xp_printstatements possible buffer overflow (deleted.rules)
 696 <-> Disabled <-> DELETED MS-SQL/SMB xp_showcolv possible buffer overflow (deleted.rules)
 697 <-> Disabled <-> DELETED MS-SQL/SMB xp_peekqueue possible buffer overflow (deleted.rules)
 698 <-> Disabled <-> DELETED MS-SQL/SMB xp_proxiedmetadata possible buffer overflow (deleted.rules)
 699 <-> Disabled <-> DELETED MS-SQL xp_printstatements possible buffer overflow (deleted.rules)
 700 <-> Disabled <-> DELETED MS-SQL/SMB xp_updatecolvbm possible buffer overflow (deleted.rules)
 701 <-> Disabled <-> DELETED MS-SQL xp_updatecolvbm possible buffer overflow (deleted.rules)
 702 <-> Disabled <-> DELETED MS-SQL/SMB xp_displayparamstmt possible buffer overflow (deleted.rules)
 703 <-> Disabled <-> DELETED MS-SQL/SMB xp_setsqlsecurity possible buffer overflow (deleted.rules)
 705 <-> Disabled <-> DELETED MS-SQL xp_showcolv possible buffer overflow (deleted.rules)
 706 <-> Disabled <-> DELETED MS-SQL xp_peekqueue possible buffer overflow (deleted.rules)
 707 <-> Disabled <-> DELETED MS-SQL xp_proxiedmetadata possible buffer overflow (deleted.rules)
 708 <-> Disabled <-> DELETED MS-SQL/SMB xp_enumresultset possible buffer overflow (deleted.rules)
 809 <-> Disabled <-> WEB-CGI whois_raw.cgi arbitrary command execution attempt (web-cgi.rules)
1143 <-> Disabled <-> DELETED WEB-MISC ///cgi-bin access (deleted.rules)
1144 <-> Disabled <-> DELETED WEB-MISC /cgi-bin/// access (deleted.rules)
1228 <-> Disabled <-> SCAN nmap XMAS (scan.rules)
1321 <-> Disabled <-> BAD-TRAFFIC 0 ttl (bad-traffic.rules)
1399 <-> Disabled <-> WEB-PHP PHP-Nuke remote file include attempt (web-php.rules)
1431 <-> Disabled <-> BAD-TRAFFIC syn to multicast address (bad-traffic.rules)
1621 <-> Enabled  <-> FTP CMD overflow attempt (ftp.rules)
1624 <-> Enabled  <-> FTP PWD overflow attempt (ftp.rules)
1627 <-> Disabled <-> BAD-TRAFFIC Unassigned/Reserved IP protocol (bad-traffic.rules)
1839 <-> Disabled <-> WEB-MISC mailman cross site scripting attempt (web-misc.rules)
2174 <-> Disabled <-> NETBIOS SMB winreg little endian bind attempt (netbios.rules)
2175 <-> Disabled <-> NETBIOS SMB winreg WriteAndX little endian bind attempt (netbios.rules)
2401 <-> Disabled <-> NETBIOS SMB Session Setup andx username overflow attempt (netbios.rules)
2402 <-> Disabled <-> NETBIOS SMB-DS Session Setup andx username overflow attempt (netbios.rules)
2403 <-> Disabled <-> NETBIOS SMB Session Setup unicode username overflow attempt (netbios.rules)
2404 <-> Disabled <-> NETBIOS SMB-DS Session Setup unicode andx username overflow attempt (netbios.rules)
2437 <-> Disabled <-> WEB-CLIENT RealPlayer arbitrary javascript command attempt (web-client.rules)
2476 <-> Disabled <-> NETBIOS SMB winreg unicode little endian bind attempt (netbios.rules)
2477 <-> Disabled <-> NETBIOS SMB winreg WriteAndX unicode little endian bind attempt (netbios.rules)
2478 <-> Disabled <-> NETBIOS SMB winreg WriteAndX alter context attempt (netbios.rules)
2479 <-> Disabled <-> NETBIOS SMB winreg WriteAndX unicode alter context attempt (netbios.rules)
2480 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown unicode little endian attempt (netbios.rules)
2481 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX unicode attempt (netbios.rules)
2482 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX little endian attempt (netbios.rules)
2483 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown unicode little endian attempt (netbios.rules)
2500 <-> Disabled <-> DELETED POP3 SSLv3 invalid data version attempt (deleted.rules)
2532 <-> Disabled <-> DELETED POP3 SSLv3 Client_Hello request (deleted.rules)
2533 <-> Disabled <-> DELETED POP3 SSLv3 Server_Hello request (deleted.rules)
2534 <-> Disabled <-> DELETED POP3 SSLv3 invalid Client_Hello attempt (deleted.rules)
2580 <-> Disabled <-> WEB-MISC server negative Content-Length attempt (web-misc.rules)
2650 <-> Enabled  <-> ORACLE user name buffer overflow attempt (oracle.rules)
2940 <-> Disabled <-> NETBIOS SMB winreg alter context attempt (netbios.rules)
2941 <-> Disabled <-> NETBIOS SMB winreg unicode alter context attempt (netbios.rules)
2942 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX attempt (netbios.rules)
2943 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown unicode attempt (netbios.rules)
2944 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown little endian attempt (netbios.rules)
2945 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown attempt (netbios.rules)
2984 <-> Disabled <-> NETBIOS SMB-DS winreg little endian bind attempt (netbios.rules)
2985 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX little endian bind attempt (netbios.rules)
2986 <-> Disabled <-> NETBIOS SMB-DS winreg unicode little endian bind attempt (netbios.rules)
2987 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX unicode little endian bind attempt (netbios.rules)
2988 <-> Disabled <-> NETBIOS SMB-DS winreg alter context attempt (netbios.rules)
2989 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX alter context attempt (netbios.rules)
2990 <-> Disabled <-> NETBIOS SMB-DS winreg unicode alter context attempt (netbios.rules)
2991 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX unicode alter context attempt (netbios.rules)
2992 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX unicode little endian attempt (netbios.rules)
2993 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown little endian attempt (netbios.rules)
2994 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX attempt (netbios.rules)
2995 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown unicode attempt (netbios.rules)
2996 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown unicode little endian attempt (netbios.rules)
2997 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown WriteAndX unicode little endian attempt (netbios.rules)
2998 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown WriteAndX little endian attempt (netbios.rules)
2999 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown unicode attempt (netbios.rules)
3202 <-> Disabled <-> NETBIOS SMB winreg little endian alter context attempt (netbios.rules)
3203 <-> Disabled <-> NETBIOS SMB winreg WriteAndX little endian alter context attempt (netbios.rules)
3204 <-> Disabled <-> NETBIOS SMB winreg unicode little endian alter context attempt (netbios.rules)
3205 <-> Disabled <-> NETBIOS SMB winreg WriteAndX unicode little endian alter context attempt (netbios.rules)
3206 <-> Disabled <-> NETBIOS SMB-DS winreg little endian alter context attempt (netbios.rules)
3207 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX little endian alter context attempt (netbios.rules)
3208 <-> Disabled <-> NETBIOS SMB-DS winreg unicode little endian alter context attempt (netbios.rules)
3209 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX unicode little endian alter context attempt (netbios.rules)
3210 <-> Disabled <-> NETBIOS SMB winreg bind attempt (netbios.rules)
3211 <-> Disabled <-> NETBIOS SMB winreg unicode bind attempt (netbios.rules)
3212 <-> Disabled <-> NETBIOS SMB winreg WriteAndX bind attempt (netbios.rules)
3213 <-> Disabled <-> NETBIOS SMB winreg WriteAndX unicode bind attempt (netbios.rules)
3214 <-> Disabled <-> NETBIOS SMB-DS winreg bind attempt (netbios.rules)
3215 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX bind attempt (netbios.rules)
3216 <-> Disabled <-> NETBIOS SMB-DS winreg unicode bind attempt (netbios.rules)
3217 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX unicode bind attempt (netbios.rules)
3218 <-> Disabled <-> NETBIOS SMB winreg OpenKey WriteAndX unicode overflow attempt (netbios.rules)
3219 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey WriteAndX little endian overflow attempt (netbios.rules)
3220 <-> Disabled <-> NETBIOS SMB winreg OpenKey overflow attempt (netbios.rules)
3221 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey WriteAndX unicode little endian overflow attempt (netbios.rules)
3222 <-> Disabled <-> NETBIOS SMB winreg OpenKey WriteAndX little endian overflow attempt (netbios.rules)
3223 <-> Disabled <-> NETBIOS SMB winreg OpenKey little endian overflow attempt (netbios.rules)
3224 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey little endian overflow attempt (netbios.rules)
3225 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey unicode overflow attempt (netbios.rules)
3226 <-> Disabled <-> NETBIOS SMB winreg OpenKey WriteAndX unicode little endian overflow attempt (netbios.rules)
3227 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey WriteAndX unicode overflow attempt (netbios.rules)
3228 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey unicode little endian overflow attempt (netbios.rules)
3229 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey WriteAndX overflow attempt (netbios.rules)
3230 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey unicode overflow attempt (netbios.rules)
3231 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey unicode little endian overflow attempt (netbios.rules)
3232 <-> Disabled <-> NETBIOS SMB winreg OpenKey WriteAndX overflow attempt (netbios.rules)
3233 <-> Disabled <-> NETBIOS SMB winreg OpenKey unicode little endian overflow attempt (netbios.rules)
3377 <-> Enabled  <-> NETBIOS SMB IActivation unicode alter context attempt (netbios.rules)
3378 <-> Enabled  <-> NETBIOS SMB IActivation WriteAndX unicode alter context attempt (netbios.rules)
3379 <-> Enabled  <-> NETBIOS SMB-DS IActivation alter context attempt (netbios.rules)
3380 <-> Enabled  <-> NETBIOS SMB-DS IActivation WriteAndX alter context attempt (netbios.rules)
3381 <-> Enabled  <-> NETBIOS SMB-DS IActivation unicode alter context attempt (netbios.rules)
3382 <-> Enabled  <-> NETBIOS SMB-DS IActivation WriteAndX unicode little endian alter context attempt (netbios.rules)
3383 <-> Enabled  <-> NETBIOS SMB IActivation little endian alter context attempt (netbios.rules)
3384 <-> Enabled  <-> NETBIOS SMB IActivation WriteAndX little endian alter context attempt (netbios.rules)
3385 <-> Enabled  <-> NETBIOS SMB IActivation unicode little endian alter context attempt (netbios.rules)
3386 <-> Enabled  <-> NETBIOS SMB-DS IActivation WriteAndX unicode little endian bind attempt (netbios.rules)
3387 <-> Enabled  <-> NETBIOS SMB IActivation little endian bind attempt (netbios.rules)
3388 <-> Enabled  <-> NETBIOS SMB IActivation WriteAndX little endian bind attempt (netbios.rules)
3389 <-> Enabled  <-> NETBIOS SMB IActivation unicode little endian bind attempt (netbios.rules)
3390 <-> Enabled  <-> NETBIOS SMB IActivation WriteAndX unicode little endian bind attempt (netbios.rules)
3391 <-> Enabled  <-> NETBIOS SMB-DS IActivation little endian bind attempt (netbios.rules)
3392 <-> Enabled  <-> NETBIOS SMB-DS IActivation WriteAndX little endian bind attempt (netbios.rules)
3409 <-> Enabled  <-> NETBIOS SMB-DS v4 IActivation remoteactivation unicode overflow attempt (netbios.rules)
3410 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation unicode little endian overflow attempt (netbios.rules)
3411 <-> Enabled  <-> NETBIOS SMB-DS v4 IActivation remoteactivation overflow attempt (netbios.rules)
3412 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation WriteAndX unicode little endian overflow attempt (netbios.rules)
3413 <-> Enabled  <-> NETBIOS SMB v4 IActivation remoteactivation overflow attempt (netbios.rules)
3414 <-> Enabled  <-> NETBIOS SMB v4 IActivation remoteactivation WriteAndX unicode little endian overflow attempt (netbios.rules)
3415 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation unicode little endian overflow attempt (netbios.rules)
3416 <-> Enabled  <-> NETBIOS SMB-DS v4 IActivation remoteactivation WriteAndX overflow attempt (netbios.rules)
3417 <-> Enabled  <-> NETBIOS SMB-DS v4 IActivation remoteactivation WriteAndX unicode overflow attempt (netbios.rules)
3418 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation little endian overflow attempt (netbios.rules)
3419 <-> Enabled  <-> NETBIOS SMB-DS IActivation remoteactivation WriteAndX little endian overflow attempt (netbios.rules)
3420 <-> Enabled  <-> NETBIOS SMB IActivation remoteactivation WriteAndX little endian overflow attempt (netbios.rules)
3421 <-> Enabled  <-> NETBIOS SMB v4 IActivation remoteactivation unicode little endian overflow attempt (netbios.rules)
3422 <-> Enabled  <-> NETBIOS SMB-DS v4 IActivation remoteactivation unicode little endian overflow attempt (netbios.rules)
3423 <-> Enabled  <-> NETBIOS SMB v4 IActivation remoteactivation WriteAndX overflow attempt (netbios.rules)
3424 <-> Enabled  <-> NETBIOS SMB v4 IActivation remoteactivation unicode overflow attempt (netbios.rules)
3457 <-> Enabled  <-> EXPLOIT Arkeia backup client type 77 overflow attempt (exploit.rules)
3473 <-> Disabled <-> WEB-CLIENT RealPlayer SMIL file overflow attempt (web-client.rules)
3505 <-> Disabled <-> DELETED POP3 SSLv2 Client_Hello request (deleted.rules)
3506 <-> Disabled <-> DELETED POP3 SSLv2 Client_Hello with pad request (deleted.rules)
3507 <-> Disabled <-> DELETED POP3 TLSv1 Client_Hello request (deleted.rules)
3508 <-> Disabled <-> DELETED POP3 TLSv1 Client_Hello via SSLv2 handshake request (deleted.rules)
3509 <-> Disabled <-> DELETED POP3 SSLv2 Server_Hello request (deleted.rules)
3510 <-> Disabled <-> DELETED POP3 TLSv1 Server_Hello request (deleted.rules)
3556 <-> Disabled <-> NETBIOS DCERPC mqqm bind attempt (netbios.rules)
3557 <-> Disabled <-> NETBIOS DCERPC mqqm little endian bind attempt (netbios.rules)
3558 <-> Disabled <-> NETBIOS SMB mqqm WriteAndX andx bind attempt (netbios.rules)
3559 <-> Disabled <-> NETBIOS SMB mqqm WriteAndX bind attempt (netbios.rules)
3560 <-> Disabled <-> NETBIOS SMB mqqm WriteAndX little endian andx bind attempt (netbios.rules)
3561 <-> Disabled <-> NETBIOS SMB mqqm WriteAndX little endian bind attempt (netbios.rules)
3562 <-> Disabled <-> NETBIOS SMB mqqm WriteAndX unicode andx bind attempt (netbios.rules)
3563 <-> Disabled <-> NETBIOS SMB mqqm WriteAndX unicode bind attempt (netbios.rules)
3564 <-> Disabled <-> NETBIOS SMB mqqm WriteAndX unicode little endian andx bind attempt (netbios.rules)
3565 <-> Disabled <-> NETBIOS SMB mqqm WriteAndX unicode little endian bind attempt (netbios.rules)
3566 <-> Disabled <-> NETBIOS SMB mqqm andx bind attempt (netbios.rules)
3567 <-> Disabled <-> NETBIOS SMB mqqm bind attempt (netbios.rules)
3568 <-> Disabled <-> NETBIOS SMB mqqm little endian andx bind attempt (netbios.rules)
3569 <-> Disabled <-> NETBIOS SMB mqqm little endian bind attempt (netbios.rules)
3570 <-> Disabled <-> NETBIOS SMB mqqm unicode andx bind attempt (netbios.rules)
3571 <-> Disabled <-> NETBIOS SMB mqqm unicode bind attempt (netbios.rules)
3572 <-> Disabled <-> NETBIOS SMB mqqm unicode little endian andx bind attempt (netbios.rules)
3573 <-> Disabled <-> NETBIOS SMB mqqm unicode little endian bind attempt (netbios.rules)
3574 <-> Disabled <-> NETBIOS SMB-DS mqqm WriteAndX andx bind attempt (netbios.rules)
3575 <-> Disabled <-> NETBIOS SMB-DS mqqm WriteAndX bind attempt (netbios.rules)
3576 <-> Disabled <-> NETBIOS SMB-DS mqqm WriteAndX little endian andx bind attempt (netbios.rules)
3577 <-> Disabled <-> NETBIOS SMB-DS mqqm WriteAndX little endian bind attempt (netbios.rules)
3578 <-> Disabled <-> NETBIOS SMB-DS mqqm WriteAndX unicode andx bind attempt (netbios.rules)
3579 <-> Disabled <-> NETBIOS SMB-DS mqqm WriteAndX unicode bind attempt (netbios.rules)
3580 <-> Disabled <-> NETBIOS SMB-DS mqqm WriteAndX unicode little endian andx bind attempt (netbios.rules)
3581 <-> Disabled <-> NETBIOS SMB-DS mqqm WriteAndX unicode little endian bind attempt (netbios.rules)
3582 <-> Disabled <-> NETBIOS SMB-DS mqqm andx bind attempt (netbios.rules)
3583 <-> Disabled <-> NETBIOS SMB-DS mqqm bind attempt (netbios.rules)
3584 <-> Disabled <-> NETBIOS SMB-DS mqqm little endian andx bind attempt (netbios.rules)
3585 <-> Disabled <-> NETBIOS SMB-DS mqqm little endian bind attempt (netbios.rules)
3586 <-> Disabled <-> NETBIOS SMB-DS mqqm unicode andx bind attempt (netbios.rules)
3587 <-> Disabled <-> NETBIOS SMB-DS mqqm unicode bind attempt (netbios.rules)
3588 <-> Disabled <-> NETBIOS SMB-DS mqqm unicode little endian andx bind attempt (netbios.rules)
3589 <-> Disabled <-> NETBIOS SMB-DS mqqm unicode little endian bind attempt (netbios.rules)
3592 <-> Disabled <-> NETBIOS DCERPC mqqm QMDeleteObject little endian overflow attempt (netbios.rules)
3593 <-> Disabled <-> NETBIOS DCERPC mqqm QMDeleteObject overflow attempt (netbios.rules)
3594 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject WriteAndX andx overflow attempt (netbios.rules)
3595 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject WriteAndX little endian andx overflow attempt (netbios.rules)
3596 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject WriteAndX little endian overflow attempt (netbios.rules)
3597 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject WriteAndX overflow attempt (netbios.rules)
3598 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject WriteAndX unicode andx overflow attempt (netbios.rules)
3599 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject WriteAndX unicode little endian andx overflow attempt (netbios.rules)
3600 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject WriteAndX unicode little endian overflow attempt (netbios.rules)
3601 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject WriteAndX unicode overflow attempt (netbios.rules)
3602 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject andx overflow attempt (netbios.rules)
3603 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject little endian andx overflow attempt (netbios.rules)
3604 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject little endian overflow attempt (netbios.rules)
3605 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject overflow attempt (netbios.rules)
3606 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject unicode andx overflow attempt (netbios.rules)
3607 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject unicode little endian andx overflow attempt (netbios.rules)
3608 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject unicode little endian overflow attempt (netbios.rules)
3609 <-> Disabled <-> NETBIOS SMB mqqm QMDeleteObject unicode overflow attempt (netbios.rules)
3610 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX andx overflow attempt (netbios.rules)
3611 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX little endian andx overflow attempt (netbios.rules)
3612 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX little endian overflow attempt (netbios.rules)
3613 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX overflow attempt (netbios.rules)
3614 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX unicode andx overflow attempt (netbios.rules)
3615 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX unicode little endian andx overflow attempt (netbios.rules)
3616 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX unicode little endian overflow attempt (netbios.rules)
3617 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject WriteAndX unicode overflow attempt (netbios.rules)
3618 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject andx overflow attempt (netbios.rules)
3619 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject little endian andx overflow attempt (netbios.rules)
3620 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject little endian overflow attempt (netbios.rules)
3621 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject overflow attempt (netbios.rules)
3622 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject unicode andx overflow attempt (netbios.rules)
3623 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject unicode little endian andx overflow attempt (netbios.rules)
3624 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject unicode little endian overflow attempt (netbios.rules)
3625 <-> Disabled <-> NETBIOS SMB-DS mqqm QMDeleteObject unicode overflow attempt (netbios.rules)
3639 <-> Disabled <-> NETBIOS SMB Trans andx data displacement null pointer DOS attempt (netbios.rules)
3640 <-> Disabled <-> NETBIOS SMB Trans data displacement null pointer DOS attempt (netbios.rules)
3641 <-> Disabled <-> NETBIOS SMB Trans unicode data displacement null pointer DOS attempt (netbios.rules)
3642 <-> Disabled <-> NETBIOS SMB Trans unicode andx data displacement null pointer DOS attempt (netbios.rules)
3643 <-> Disabled <-> NETBIOS SMB-DS Trans andx data displacement null pointer DOS attempt (netbios.rules)
3644 <-> Disabled <-> NETBIOS SMB-DS Trans data displacement null pointer DOS attempt (netbios.rules)
3645 <-> Disabled <-> NETBIOS SMB-DS Trans unicode data displacement null pointer DOS attempt (netbios.rules)
3646 <-> Disabled <-> NETBIOS SMB-DS Trans unicode andx data displacement null pointer DOS attempt (netbios.rules)
3647 <-> Disabled <-> NETBIOS-DG SMB Trans andx data displacement null pointer DOS attempt (netbios.rules)
3648 <-> Disabled <-> NETBIOS-DG SMB Trans data displacement null pointer DOS attempt (netbios.rules)
3649 <-> Disabled <-> NETBIOS-DG SMB Trans unicode data displacement null pointer DOS attempt (netbios.rules)
3650 <-> Disabled <-> NETBIOS-DG SMB Trans unicode andx data displacement null pointer DOS attempt (netbios.rules)
3683 <-> Disabled <-> WEB-CLIENT spoofed MIME-Type auto-execution attempt (web-client.rules)
3694 <-> Disabled <-> WEB-MISC Squid content length cache poisoning attempt (web-misc.rules)
4659 <-> Disabled <-> NETBIOS-DG SMB NT Trans NT SET SECURITY DESC SACL overflow attempt (netbios.rules)
4660 <-> Disabled <-> NETBIOS-DG SMB NT Trans NT SET SECURITY DESC andx SACL overflow attempt (netbios.rules)
4661 <-> Disabled <-> NETBIOS-DG SMB NT Trans NT SET SECURITY DESC unicode SACL overflow attempt (netbios.rules)
4662 <-> Disabled <-> NETBIOS-DG SMB NT Trans NT SET SECURITY DESC unicode andx SACL overflow attempt (netbios.rules)
4671 <-> Disabled <-> NETBIOS-DG SMB NT Trans NT SET SECURITY DESC DACL overflow attempt (netbios.rules)
4672 <-> Disabled <-> NETBIOS-DG SMB NT Trans NT SET SECURITY DESC andx DACL overflow attempt (netbios.rules)
4673 <-> Disabled <-> NETBIOS-DG SMB NT Trans NT SET SECURITY DESC unicode DACL overflow attempt (netbios.rules)
4674 <-> Disabled <-> NETBIOS-DG SMB NT Trans NT SET SECURITY DESC unicode andx DACL overflow attempt (netbios.rules)
4681 <-> Disabled <-> WEB-MISC Symantec admin interface client negative Content-Length attempt (web-misc.rules)
5549 <-> Disabled <-> NETBIOS SMB winreg andx alter context attempt (netbios.rules)
5550 <-> Disabled <-> NETBIOS SMB winreg unicode andx alter context attempt (netbios.rules)
5551 <-> Disabled <-> NETBIOS SMB winreg WriteAndX andx alter context attempt (netbios.rules)
5552 <-> Disabled <-> NETBIOS SMB winreg WriteAndX unicode andx alter context attempt (netbios.rules)
5553 <-> Disabled <-> NETBIOS SMB-DS winreg andx alter context attempt (netbios.rules)
5554 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX andx alter context attempt (netbios.rules)
5555 <-> Disabled <-> NETBIOS SMB-DS winreg unicode andx alter context attempt (netbios.rules)
5556 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX unicode andx alter context attempt (netbios.rules)
5557 <-> Disabled <-> NETBIOS SMB winreg little endian andx alter context attempt (netbios.rules)
5558 <-> Disabled <-> NETBIOS SMB winreg WriteAndX little endian andx alter context attempt (netbios.rules)
5559 <-> Disabled <-> NETBIOS SMB winreg unicode little endian andx alter context attempt (netbios.rules)
5560 <-> Disabled <-> NETBIOS SMB winreg WriteAndX unicode little endian andx alter context attempt (netbios.rules)
5561 <-> Disabled <-> NETBIOS SMB-DS winreg little endian andx alter context attempt (netbios.rules)
5562 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX little endian andx alter context attempt (netbios.rules)
5563 <-> Disabled <-> NETBIOS SMB-DS winreg unicode little endian andx alter context attempt (netbios.rules)
5564 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX unicode little endian andx alter context attempt (netbios.rules)
5565 <-> Disabled <-> NETBIOS SMB winreg andx bind attempt (netbios.rules)
5566 <-> Disabled <-> NETBIOS SMB winreg unicode andx bind attempt (netbios.rules)
5567 <-> Disabled <-> NETBIOS SMB winreg WriteAndX andx bind attempt (netbios.rules)
5568 <-> Disabled <-> NETBIOS SMB winreg WriteAndX unicode andx bind attempt (netbios.rules)
5569 <-> Disabled <-> NETBIOS SMB-DS winreg andx bind attempt (netbios.rules)
5570 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX andx bind attempt (netbios.rules)
5571 <-> Disabled <-> NETBIOS SMB-DS winreg unicode andx bind attempt (netbios.rules)
5572 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX unicode andx bind attempt (netbios.rules)
5573 <-> Disabled <-> NETBIOS SMB winreg little endian andx bind attempt (netbios.rules)
5574 <-> Disabled <-> NETBIOS SMB winreg WriteAndX little endian andx bind attempt (netbios.rules)
5575 <-> Disabled <-> NETBIOS SMB winreg unicode little endian andx bind attempt (netbios.rules)
5576 <-> Disabled <-> NETBIOS SMB winreg WriteAndX unicode little endian andx bind attempt (netbios.rules)
5577 <-> Disabled <-> NETBIOS SMB-DS winreg little endian andx bind attempt (netbios.rules)
5578 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX little endian andx bind attempt (netbios.rules)
5579 <-> Disabled <-> NETBIOS SMB-DS winreg unicode little endian andx bind attempt (netbios.rules)
5580 <-> Disabled <-> NETBIOS SMB-DS winreg WriteAndX unicode little endian andx bind attempt (netbios.rules)
5581 <-> Disabled <-> NETBIOS SMB winreg OpenKey unicode overflow attempt (netbios.rules)
5582 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey overflow attempt (netbios.rules)
5583 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey WriteAndX overflow attempt (netbios.rules)
5584 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey WriteAndX unicode overflow attempt (netbios.rules)
5585 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey overflow attempt (netbios.rules)
5586 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey unicode overflow attempt (netbios.rules)
5587 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey overflow attempt (netbios.rules)
5588 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey WriteAndX unicode overflow attempt (netbios.rules)
5589 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey WriteAndX overflow attempt (netbios.rules)
5590 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey WriteAndX unicode little endian overflow attempt (netbios.rules)
5591 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey WriteAndX little endian overflow attempt (netbios.rules)
5592 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey WriteAndX unicode little endian overflow attempt (netbios.rules)
5593 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey little endian overflow attempt (netbios.rules)
5594 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey unicode little endian overflow attempt (netbios.rules)
5595 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey WriteAndX little endian overflow attempt (netbios.rules)
5596 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey little endian overflow attempt (netbios.rules)
5597 <-> Disabled <-> NETBIOS SMB winreg OpenKey WriteAndX unicode andx overflow attempt (netbios.rules)
5598 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey WriteAndX little endian andx overflow attempt (netbios.rules)
5599 <-> Disabled <-> NETBIOS SMB winreg OpenKey andx overflow attempt (netbios.rules)
5600 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey WriteAndX unicode little endian andx overflow attempt (netbios.rules)
5601 <-> Disabled <-> NETBIOS SMB winreg OpenKey WriteAndX little endian andx overflow attempt (netbios.rules)
5602 <-> Disabled <-> NETBIOS SMB winreg OpenKey little endian andx overflow attempt (netbios.rules)
5603 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey little endian andx overflow attempt (netbios.rules)
5604 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey unicode andx overflow attempt (netbios.rules)
5605 <-> Disabled <-> NETBIOS SMB winreg OpenKey WriteAndX unicode little endian andx overflow attempt (netbios.rules)
5606 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey WriteAndX unicode andx overflow attempt (netbios.rules)
5607 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey unicode little endian andx overflow attempt (netbios.rules)
5608 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey WriteAndX andx overflow attempt (netbios.rules)
5609 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey unicode andx overflow attempt (netbios.rules)
5610 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey unicode little endian andx overflow attempt (netbios.rules)
5611 <-> Disabled <-> NETBIOS SMB winreg OpenKey WriteAndX andx overflow attempt (netbios.rules)
5612 <-> Disabled <-> NETBIOS SMB winreg OpenKey unicode little endian andx overflow attempt (netbios.rules)
5613 <-> Disabled <-> NETBIOS SMB winreg OpenKey unicode andx overflow attempt (netbios.rules)
5614 <-> Disabled <-> NETBIOS SMB-DS winreg OpenKey andx overflow attempt (netbios.rules)
5615 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey WriteAndX andx overflow attempt (netbios.rules)
5616 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey WriteAndX unicode andx overflow attempt (netbios.rules)
5617 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey andx overflow attempt (netbios.rules)
5618 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey unicode andx overflow attempt (netbios.rules)
5619 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey andx overflow attempt (netbios.rules)
5620 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey WriteAndX unicode andx overflow attempt (netbios.rules)
5621 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey WriteAndX andx overflow attempt (netbios.rules)
5622 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey WriteAndX unicode little endian andx overflow attempt (netbios.rules)
5623 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey WriteAndX little endian andx overflow attempt (netbios.rules)
5624 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey WriteAndX unicode little endian andx overflow attempt (netbios.rules)
5625 <-> Disabled <-> NETBIOS SMB v4 winreg OpenKey little endian andx overflow attempt (netbios.rules)
5626 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey unicode little endian andx overflow attempt (netbios.rules)
5627 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey WriteAndX little endian andx overflow attempt (netbios.rules)
5628 <-> Disabled <-> NETBIOS SMB-DS v4 winreg OpenKey little endian andx overflow attempt (netbios.rules)
5629 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX unicode attempt (netbios.rules)
5630 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown attempt (netbios.rules)
5631 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX attempt (netbios.rules)
5632 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown attempt (netbios.rules)
5633 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX unicode attempt (netbios.rules)
5634 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown unicode little endian attempt (netbios.rules)
5635 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown little endian attempt (netbios.rules)
5636 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX unicode little endian attempt (netbios.rules)
5637 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX little endian attempt (netbios.rules)
5638 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX little endian attempt (netbios.rules)
5639 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown little endian attempt (netbios.rules)
5640 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX unicode little endian attempt (netbios.rules)
5641 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown WriteAndX attempt (netbios.rules)
5642 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown unicode attempt (netbios.rules)
5643 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown WriteAndX unicode attempt (netbios.rules)
5644 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown attempt (netbios.rules)
5645 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX andx attempt (netbios.rules)
5646 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown unicode andx attempt (netbios.rules)
5647 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown little endian andx attempt (netbios.rules)
5648 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown andx attempt (netbios.rules)
5649 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX little endian andx attempt (netbios.rules)
5650 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown unicode little endian andx attempt (netbios.rules)
5651 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown unicode little endian andx attempt (netbios.rules)
5652 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX unicode andx attempt (netbios.rules)
5653 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX unicode little endian andx attempt (netbios.rules)
5654 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown little endian andx attempt (netbios.rules)
5655 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown WriteAndX andx attempt (netbios.rules)
5656 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown unicode andx attempt (netbios.rules)
5657 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown unicode little endian andx attempt (netbios.rules)
5658 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown WriteAndX unicode little endian andx attempt (netbios.rules)
5659 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown WriteAndX little endian andx attempt (netbios.rules)
5660 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown unicode andx attempt (netbios.rules)
5661 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX unicode andx attempt (netbios.rules)
5662 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown andx attempt (netbios.rules)
5663 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX andx attempt (netbios.rules)
5664 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown andx attempt (netbios.rules)
5665 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX unicode andx attempt (netbios.rules)
5666 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown unicode little endian andx attempt (netbios.rules)
5667 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown little endian andx attempt (netbios.rules)
5668 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX unicode little endian andx attempt (netbios.rules)
5669 <-> Disabled <-> NETBIOS SMB v4 winreg InitiateSystemShutdown WriteAndX little endian andx attempt (netbios.rules)
5670 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX little endian andx attempt (netbios.rules)
5671 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown little endian andx attempt (netbios.rules)
5672 <-> Disabled <-> NETBIOS SMB-DS v4 winreg InitiateSystemShutdown WriteAndX unicode little endian andx attempt (netbios.rules)
5673 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown WriteAndX andx attempt (netbios.rules)
5674 <-> Disabled <-> NETBIOS SMB-DS winreg InitiateSystemShutdown unicode andx attempt (netbios.rules)
5675 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown WriteAndX unicode andx attempt (netbios.rules)
5676 <-> Disabled <-> NETBIOS SMB winreg InitiateSystemShutdown andx attempt (netbios.rules)
5677 <-> Disabled <-> NETBIOS SMB Session Setup username overflow attempt (netbios.rules)
5678 <-> Disabled <-> NETBIOS SMB-DS Session Setup username overflow attempt (netbios.rules)
5679 <-> Disabled <-> NETBIOS SMB-DS Session Setup unicode username overflow attempt (netbios.rules)
5680 <-> Disabled <-> NETBIOS-DG SMB Session Setup username overflow attempt (netbios.rules)
5681 <-> Disabled <-> NETBIOS-DG SMB Session Setup unicode username overflow attempt (netbios.rules)
5682 <-> Disabled <-> NETBIOS SMB Session Setup unicode andx username overflow attempt (netbios.rules)
5683 <-> Disabled <-> NETBIOS-DG SMB Session Setup andx username overflow attempt (netbios.rules)
5684 <-> Disabled <-> NETBIOS-DG SMB Session Setup unicode andx username overflow attempt (netbios.rules)
6014 <-> Disabled <-> BACKDOOR coolcat runtime connection detection - tcp 3 (backdoor.rules)
6702 <-> Disabled <-> NETBIOS SMB NT Trans Secondary Param Count overflow attempt (netbios.rules)
6703 <-> Disabled <-> NETBIOS SMB NT Trans Secondary unicode Param Count overflow attempt (netbios.rules)
6704 <-> Disabled <-> NETBIOS SMB-DS NT Trans Secondary Param Count overflow attempt (netbios.rules)
6705 <-> Disabled <-> NETBIOS SMB-DS NT Trans Secondary unicode Param Count overflow attempt (netbios.rules)
6706 <-> Disabled <-> NETBIOS-DG SMB NT Trans Secondary Param Count overflow attempt (netbios.rules)
6707 <-> Disabled <-> NETBIOS-DG SMB NT Trans Secondary unicode Param Count overflow attempt (netbios.rules)
6708 <-> Disabled <-> NETBIOS SMB NT Trans Secondary andx Param Count overflow attempt (netbios.rules)
6709 <-> Disabled <-> NETBIOS SMB NT Trans Secondary unicode andx Param Count overflow attempt (netbios.rules)
6710 <-> Disabled <-> NETBIOS SMB-DS NT Trans Secondary andx Param Count overflow attempt (netbios.rules)
6711 <-> Disabled <-> NETBIOS SMB-DS NT Trans Secondary unicode andx Param Count overflow attempt (netbios.rules)
6712 <-> Disabled <-> NETBIOS-DG SMB NT Trans Secondary andx Param Count overflow attempt (netbios.rules)
6713 <-> Disabled <-> NETBIOS-DG SMB NT Trans Secondary unicode andx Param Count overflow attempt (netbios.rules)
7100 <-> Disabled <-> DELETED BACKDOOR mass connect 1.1 runtime detection - http (deleted.rules)
7555 <-> Disabled <-> DELETED SPYWARE-PUT Adware hxdl runtime detection - crypt user-agent (deleted.rules)
7614 <-> Disabled <-> BACKDOOR flux 1.0 runtime detection - keep alive - flowbit set (backdoor.rules)
7615 <-> Disabled <-> BACKDOOR flux 1.0 runtime detection - keep alive (backdoor.rules)
7735 <-> Disabled <-> BACKDOOR bionet 4.05 runtime detection - initial connection (backdoor.rules)
8060 <-> Enabled  <-> EXPLOIT UltraVNC VNCLog buffer overflow (exploit.rules)
8442 <-> Disabled <-> DELETED SMTP Mozilla regular expression heap corruption attempt (deleted.rules)
8443 <-> Disabled <-> DELETED WEB-CLIENT Mozilla regular expression heap corruption attempt (deleted.rules)

State change rules:
1233 <-> Disabled <-> WEB-CLIENT Outlook EML access (web-client.rules)
1284 <-> Disabled <-> WEB-CLIENT readme.eml download attempt (web-client.rules)
1290 <-> Disabled <-> WEB-CLIENT readme.eml autoload attempt (web-client.rules)
1735 <-> Disabled <-> WEB-CLIENT XMLHttpRequest attempt (web-client.rules)
1840 <-> Disabled <-> WEB-CLIENT Javascript document.domain attempt (web-client.rules)
2435 <-> Disabled <-> WEB-CLIENT Microsoft emf metafile access (web-client.rules)
2436 <-> Disabled <-> WEB-CLIENT Microsoft wmf metafile access (web-client.rules)
2438 <-> Disabled <-> WEB-CLIENT RealPlayer playlist file URL overflow attempt (web-client.rules)
2439 <-> Disabled <-> WEB-CLIENT RealPlayer playlist http URL overflow attempt (web-client.rules)
2440 <-> Disabled <-> WEB-CLIENT RealPlayer playlist rtsp URL overflow attempt (web-client.rules)
2485 <-> Disabled <-> WEB-CLIENT Norton antivirus sysmspam.dll load attempt (web-client.rules)
2577 <-> Disabled <-> WEB-CLIENT local resource redirection attempt (web-client.rules)
2589 <-> Disabled <-> WEB-CLIENT Content-Disposition CLSID command attempt (web-client.rules)
2671 <-> Disabled <-> WEB-CLIENT bitmap BitmapOffset integer overflow attempt (web-client.rules)
2673 <-> Disabled <-> WEB-CLIENT libpng tRNS overflow attempt (web-client.rules)
3079 <-> Disabled <-> WEB-CLIENT Microsoft ANI file parsing overflow (web-client.rules)
3088 <-> Disabled <-> WEB-CLIENT winamp .cda file name overflow attempt (web-client.rules)
3132 <-> Disabled <-> WEB-CLIENT PNG large image width download attempt (web-client.rules)
3133 <-> Disabled <-> WEB-CLIENT PNG large image height download attempt (web-client.rules)
3134 <-> Disabled <-> WEB-CLIENT PNG large colour depth download attempt (web-client.rules)
3148 <-> Disabled <-> WEB-CLIENT winhelp clsid attempt (web-client.rules)
3149 <-> Disabled <-> WEB-CLIENT object type overflow attempt (web-client.rules)
3192 <-> Disabled <-> WEB-CLIENT Windows Media Player directory traversal via Content-Disposition attempt (web-client.rules)
3470 <-> Disabled <-> WEB-CLIENT RealPlayer VIDORV30 header length buffer overflow (web-client.rules)
3471 <-> Disabled <-> WEB-CLIENT iTunes playlist URL overflow attempt (web-client.rules)
3550 <-> Disabled <-> WEB-CLIENT HTML http scheme hostname overflow attempt (web-client.rules)
3551 <-> Disabled <-> WEB-CLIENT .hta download attempt (web-client.rules)
3552 <-> Disabled <-> WEB-CLIENT OLE32 MSHTA masquerade attempt (web-client.rules)
3553 <-> Disabled <-> WEB-CLIENT HTML DOM null element insertion attempt (web-client.rules)
3632 <-> Disabled <-> WEB-CLIENT Mozilla bitmap width integer overflow attempt (web-client.rules)
3633 <-> Disabled <-> WEB-CLIENT bitmap transfer (web-client.rules)
3634 <-> Disabled <-> WEB-CLIENT Mozilla bitmap width integer overflow multipacket attempt (web-client.rules)
3684 <-> Disabled <-> WEB-CLIENT Bitmap Transfer (web-client.rules)
3685 <-> Disabled <-> WEB-CLIENT bitmap BitmapOffset multipacket integer overflow attempt (web-client.rules)
3686 <-> Disabled <-> WEB-CLIENT Internet Explorer Content Advisor attempted overflow (web-client.rules)
3689 <-> Disabled <-> WEB-CLIENT Internet Explorer tRNS overflow attempt (web-client.rules)
3814 <-> Disabled <-> WEB-CLIENT IE javaprxy.dll COM access (web-client.rules)
3819 <-> Disabled <-> WEB-CLIENT multipacket CHM file transfer start (web-client.rules)
3820 <-> Disabled <-> WEB-CLIENT multipacket CHM file transfer attempt (web-client.rules)
3821 <-> Disabled <-> WEB-CLIENT CHM file transfer attempt (web-client.rules)
4132 <-> Disabled <-> WEB-CLIENT msdds clsid attempt (web-client.rules)
4133 <-> Disabled <-> WEB-CLIENT devenum clsid attempt (web-client.rules)
4134 <-> Disabled <-> WEB-CLIENT blnmgr clsid attempt (web-client.rules)
4135 <-> Disabled <-> WEB-CLIENT IE JPEG heap overflow single packet attempt (web-client.rules)
4145 <-> Disabled <-> WEB-CLIENT Windows Trouble Shooter ActiveX Object Access (web-client.rules)
4146 <-> Disabled <-> WEB-CLIENT Share Point Portal Services Log Sink ActiveX Object Access (web-client.rules)
4147 <-> Disabled <-> WEB-CLIENT ActiveLabel ActiveX Object Access (web-client.rules)
4150 <-> Disabled <-> WEB-CLIENT Outlook View ActiveX Object Access (web-client.rules)
4151 <-> Disabled <-> WEB-CLIENT System Monitor Source Properties ActiveX Object Access (web-client.rules)
4152 <-> Disabled <-> WEB-CLIENT Windows Media Player 6.4 ActiveX Object Access (web-client.rules)
4153 <-> Disabled <-> WEB-CLIENT Eyedog ActiveX Object Access (web-client.rules)
4154 <-> Disabled <-> WEB-CLIENT Active Setup ActiveX Object Access (web-client.rules)
4155 <-> Disabled <-> WEB-CLIENT htmlfile ActiveX Object Access (web-client.rules)
4156 <-> Disabled <-> WEB-CLIENT Windows Media Player 7+ ActiveX Object Access (web-client.rules)
4157 <-> Disabled <-> WEB-CLIENT MSN Setup BBS 4.71.0.10 ActiveX Object Access (web-client.rules)
4158 <-> Disabled <-> WEB-CLIENT Windows Media Player Active Movie ActiveX Object Access (web-client.rules)
4159 <-> Disabled <-> WEB-CLIENT Multimedia File Property Sheet ActiveX Object Access (web-client.rules)
4160 <-> Disabled <-> WEB-CLIENT Microsoft Windows Reporting Tool ActiveX Object Access (web-client.rules)
4161 <-> Disabled <-> WEB-CLIENT DigWebX MSN ActiveX Object Access (web-client.rules)
4162 <-> Disabled <-> WEB-CLIENT DigWebX MSN ActiveX Object Access (web-client.rules)
4163 <-> Disabled <-> WEB-CLIENT DigWebX MSN ActiveX Object Access (web-client.rules)
4164 <-> Disabled <-> WEB-CLIENT DigWebX MSN ActiveX Object Access (web-client.rules)
4165 <-> Disabled <-> WEB-CLIENT Image Control 1.0 ActiveX Object Access (web-client.rules)
4166 <-> Disabled <-> WEB-CLIENT Shell.Explorer ActiveX Object Access (web-client.rules)
4167 <-> Disabled <-> WEB-CLIENT MSN Heartbeat ActiveX Object Access (web-client.rules)
4168 <-> Disabled <-> WEB-CLIENT Shell Automation Service ActiveX Object Access (web-client.rules)
4169 <-> Disabled <-> WEB-CLIENT Internet Explorer Active Setup ActiveX Object Access (web-client.rules)
4170 <-> Disabled <-> WEB-CLIENT Office 2000/2002 Web Components Data Source Control ActiveX Object Access (web-client.rules)
4171 <-> Disabled <-> WEB-CLIENT Registration Wizard ActiveX Object Access (web-client.rules)
4172 <-> Disabled <-> WEB-CLIENT Microsoft Agent v1.5 ActiveX Object Access (web-client.rules)
4173 <-> Disabled <-> WEB-CLIENT MsnPUpld ActiveX Object Access (web-client.rules)
4174 <-> Disabled <-> WEB-CLIENT Symantec RuFSI registry Information Class ActiveX Object Access (web-client.rules)
4175 <-> Disabled <-> WEB-CLIENT Office 2000/2002 Web Components PivotTable ActiveX Object Access (web-client.rules)
4176 <-> Disabled <-> WEB-CLIENT Office 2000 and 2002 Web Components Chart ActiveX Object Access (web-client.rules)
4177 <-> Disabled <-> WEB-CLIENT Office 2000 and 2002 Web Components Spreadsheet ActiveX Object Access (web-client.rules)
4178 <-> Disabled <-> WEB-CLIENT Office 2000 and 2002 Web Components Record Navigation Control ActiveX Object Access (web-client.rules)
4179 <-> Disabled <-> WEB-CLIENT DirectX Files Viewer ActiveX Object Access (web-client.rules)
4180 <-> Disabled <-> WEB-CLIENT Kodak Image Scan ActiveX Object Access (web-client.rules)
4181 <-> Disabled <-> WEB-CLIENT Smartcard Enrollment ActiveX Object Access (web-client.rules)
4182 <-> Disabled <-> WEB-CLIENT MSN Chat v4.5, 4.6 ActiveX Object Access (web-client.rules)
4183 <-> Disabled <-> WEB-CLIENT HTML Help ActiveX Object Access (web-client.rules)
4184 <-> Disabled <-> WEB-CLIENT Certificate Enrollment ActiveX Object Access (web-client.rules)
4185 <-> Disabled <-> WEB-CLIENT Terminal Services Advanced Client ActiveX Object Access (web-client.rules)
4186 <-> Disabled <-> WEB-CLIENT Kodak Image Editing ActiveX Object Access (web-client.rules)
4187 <-> Disabled <-> WEB-CLIENT Terminal Services Advanced Client ActiveX Object Access (web-client.rules)
4188 <-> Disabled <-> WEB-CLIENT RAV Online Scanner ActiveX Object Access (web-client.rules)
4189 <-> Disabled <-> WEB-CLIENT Third-Party Plugin ActiveX Object Access (web-client.rules)
4190 <-> Disabled <-> WEB-CLIENT Kodak Thumbnail Image ActiveX Object Access (web-client.rules)
4191 <-> Disabled <-> WEB-CLIENT MsnPUpld ActiveX Object Access (web-client.rules)
4192 <-> Disabled <-> WEB-CLIENT HHOpen ActiveX Object Access (web-client.rules)
4193 <-> Disabled <-> WEB-CLIENT Kodak Image Editing ActiveX Object Access (web-client.rules)
4197 <-> Disabled <-> WEB-CLIENT DigWebX MSN ActiveX Object Access (web-client.rules)
4198 <-> Disabled <-> WEB-CLIENT Internet Explorer Blnmgrps.dll ActiveX Object Access (web-client.rules)
4199 <-> Disabled <-> WEB-CLIENT Internet Explorer Blnmgrps.dll ActiveX Object Access (web-client.rules)
4200 <-> Disabled <-> WEB-CLIENT Index Server Scope Administration ActiveX Object Access (web-client.rules)
4201 <-> Disabled <-> WEB-CLIENT Queued Components Recorder ActiveX Object Access (web-client.rules)
4202 <-> Disabled <-> WEB-CLIENT DirectAnimation ActiveX Object Access (web-client.rules)
4203 <-> Disabled <-> WEB-CLIENT Microsoft Marquee Control ActiveX Object Access (web-client.rules)
4204 <-> Disabled <-> WEB-CLIENT Microsoft DT PolyLine Control 2 ActiveX Object Access (web-client.rules)
4205 <-> Disabled <-> WEB-CLIENT Microsoft Visual Database Tools Database Designer v7.0 ActiveX Object Access (web-client.rules)
4206 <-> Disabled <-> WEB-CLIENT Microsoft MPEG-4 Video Decompressor Property Page ActiveX Object Access (web-client.rules)
4207 <-> Disabled <-> WEB-CLIENT Microsoft MS Audio Decompressor Control Property Page ActiveX Object Access (web-client.rules)
4208 <-> Disabled <-> WEB-CLIENT LexRefStEsObject Class ActiveX Object Access (web-client.rules)
4209 <-> Disabled <-> WEB-CLIENT LexRefStFrObject Class ActiveX Object Access (web-client.rules)
4210 <-> Disabled <-> WEB-CLIENT Internet Explorer Msb1geen.dll ActiveX Object Access (web-client.rules)
4211 <-> Disabled <-> WEB-CLIENT Microsoft DDS Library Shape Control ActiveX Object Access (web-client.rules)
4212 <-> Disabled <-> WEB-CLIENT Microsoft DDS Generic Class ActiveX Object Access (web-client.rules)
4213 <-> Disabled <-> WEB-CLIENT Microsoft DDS Picture Shape Control ActiveX Object Access (web-client.rules)
4214 <-> Disabled <-> WEB-CLIENT Microsoft TipGW Init ActiveX Object Access (web-client.rules)
4215 <-> Disabled <-> WEB-CLIENT Microsoft HTML Popup Window ActiveX Object Access (web-client.rules)
4216 <-> Disabled <-> WEB-CLIENT CLSID_CComAcctImport ActiveX Object Access (web-client.rules)
4217 <-> Disabled <-> WEB-CLIENT Microsoft Office Services on the Web Free/Busy ActiveX Object Access (web-client.rules)
4218 <-> Disabled <-> WEB-CLIENT Microsoft Visual Basic WebClass ActiveX Object Access (web-client.rules)
4219 <-> Disabled <-> WEB-CLIENT Microsoft Network Connections Tray ActiveX Object Access (web-client.rules)
4220 <-> Disabled <-> WEB-CLIENT Microsoft Network and Dial-Up Connections ActiveX Object Access (web-client.rules)
4221 <-> Disabled <-> WEB-CLIENT Microsoft ProxyStub Dispatch ActiveX Object Access (web-client.rules)
4222 <-> Disabled <-> WEB-CLIENT Internet Explorer Outllib.dll ActiveX Object Access (web-client.rules)
4223 <-> Disabled <-> WEB-CLIENT Microsoft OpenCable Class ActiveX Object Access (web-client.rules)
4224 <-> Disabled <-> WEB-CLIENT Microsoft VideoPort ActiveX Object Access (web-client.rules)
4225 <-> Disabled <-> WEB-CLIENT Microsoft Repository ActiveX Object Access (web-client.rules)
4226 <-> Disabled <-> WEB-CLIENT Microsoft DocHost User Interface Handler ActiveX Object Access (web-client.rules)
4227 <-> Disabled <-> WEB-CLIENT Microsoft Network Connections ActiveX Object Access (web-client.rules)
4228 <-> Disabled <-> WEB-CLIENT Microsoft Windows Start Menu ActiveX Object Access (web-client.rules)
4229 <-> Disabled <-> WEB-CLIENT MSAPP Export Support for Microsoft Access ActiveX Object Access (web-client.rules)
4230 <-> Disabled <-> WEB-CLIENT Search Assistant UI ActiveX Object Access (web-client.rules)
4231 <-> Disabled <-> WEB-CLIENT Microsoft SysTray ActiveX Object Access (web-client.rules)
4232 <-> Disabled <-> WEB-CLIENT Microsoft SysTray Invoker ActiveX Object Access (web-client.rules)
4233 <-> Disabled <-> WEB-CLIENT Microsoft Visual Database Tools Query Designer v7.0 ActiveX Object Access (web-client.rules)
4234 <-> Disabled <-> WEB-CLIENT Microsoft MSVTDGridCtrl7 ActiveX Object Access (web-client.rules)
4235 <-> Disabled <-> WEB-CLIENT Helper Object for Java ActiveX Object Access (web-client.rules)
4236 <-> Disabled <-> WEB-CLIENT WMI ASDI Extension ActiveX Object Access (web-client.rules)
4643 <-> Disabled <-> WEB-CLIENT malformed windows shortcut file buffer overflow attempt (web-client.rules)
4644 <-> Disabled <-> WEB-CLIENT malformed windows shortcut file with comment buffer overflow attempt (web-client.rules)
4648 <-> Disabled <-> WEB-CLIENT wang image admin activex object access (web-client.rules)
4890 <-> Disabled <-> WEB-CLIENT IAVIStream & IAVIFile Proxy ActiveX Object Access (web-client.rules)
4891 <-> Disabled <-> WEB-CLIENT cfw Class ActiveX Object Access (web-client.rules)
4892 <-> Disabled <-> WEB-CLIENT MTSEvents Class ActiveX Object Access (web-client.rules)
4893 <-> Disabled <-> WEB-CLIENT Trident HTMLEditor ActiveX Object Access (web-client.rules)
4894 <-> Disabled <-> WEB-CLIENT PSEnumVariant ActiveX Object Access (web-client.rules)
4895 <-> Disabled <-> WEB-CLIENT PSTypeInfo ActiveX Object Access (web-client.rules)
4896 <-> Disabled <-> WEB-CLIENT PSTypeLib ActiveX Object Access (web-client.rules)
4897 <-> Disabled <-> WEB-CLIENT PSOAInterface ActiveX Object Access (web-client.rules)
4898 <-> Disabled <-> WEB-CLIENT PSTypeComp ActiveX Object Access (web-client.rules)
4899 <-> Disabled <-> WEB-CLIENT ISupportErrorInfo Interface ActiveX Object Access (web-client.rules)
4900 <-> Disabled <-> WEB-CLIENT Outlook Progress Ctl ActiveX Object Access (web-client.rules)
4901 <-> Disabled <-> WEB-CLIENT VMR Allocator Presenter 9 ActiveX Object Access (web-client.rules)
4902 <-> Disabled <-> WEB-CLIENT Video Mixing Renderer 9 ActiveX Object Access (web-client.rules)
4903 <-> Disabled <-> WEB-CLIENT VMR ImageSync 9 ActiveX Object Access (web-client.rules)
4904 <-> Disabled <-> WEB-CLIENT Microsoft Repository Alias ActiveX Object Access (web-client.rules)
4905 <-> Disabled <-> WEB-CLIENT Microsoft Repository Object ActiveX Object Access (web-client.rules)
4906 <-> Disabled <-> WEB-CLIENT Microsoft Repository Interface Definition ActiveX Object Access (web-client.rules)
4907 <-> Disabled <-> WEB-CLIENT Microsoft Repository Collection Definition ActiveX Object Access (web-client.rules)
4908 <-> Disabled <-> WEB-CLIENT Microsoft Repository Method Definition ActiveX Object Access (web-client.rules)
4909 <-> Disabled <-> WEB-CLIENT Microsoft Repository Property Definition ActiveX Object Access (web-client.rules)
4910 <-> Disabled <-> WEB-CLIENT Microsoft Repository Relationship Definition ActiveX Object Access (web-client.rules)
4911 <-> Disabled <-> WEB-CLIENT Microsoft Repository Type Library ActiveX Object Access (web-client.rules)
4912 <-> Disabled <-> WEB-CLIENT Microsoft Repository Root ActiveX Object Access (web-client.rules)
4913 <-> Disabled <-> WEB-CLIENT Microsoft Repository Workspace ActiveX Object Access (web-client.rules)
4914 <-> Disabled <-> WEB-CLIENT Microsoft Repository Script Definition ActiveX Object Access (web-client.rules)
4915 <-> Disabled <-> WEB-CLIENT Shortcut Handler ActiveX Object Access (web-client.rules)
4982 <-> Disabled <-> WEB-CLIENT Adodb.Stream ActiveX Object Access (web-client.rules)
5319 <-> Disabled <-> WEB-CLIENT Metasploit Windows picture and fax viewer wmf arbitrary code execution attempt (web-client.rules)
5710 <-> Disabled <-> WEB-CLIENT Windows Media Player Plugin for Non-IE browsers buffer overflow attempt (web-client.rules)
5711 <-> Disabled <-> WEB-CLIENT Windows Media Player zero length bitmap heap overflow attempt (web-client.rules)
5712 <-> Disabled <-> WEB-CLIENT Windows Media Player invalid data offset bitmap heap overflow attempt (web-client.rules)
5713 <-> Disabled <-> WEB-CLIENT Windows Metafile invalid header size integer overflow (web-client.rules)
5740 <-> Disabled <-> WEB-CLIENT Microsoft HTML help workshop file .hhp download attempt (web-client.rules)
5741 <-> Disabled <-> WEB-CLIENT Microsoft HTML help workshop buffer overflow attempt (web-client.rules)
6002 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS Rectilinear GDD Layout ActiveX Object Access (web-client.rules)
6003 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS Rectilinear GDD Route ActiveX Object Access (web-client.rules)
6004 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS Circular Auto Layout Logic 2 ActiveX Object Access (web-client.rules)
6005 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS Straight Line Routing Logic 2 ActiveX Object Access (web-client.rules)
6006 <-> Disabled <-> WEB-CLIENT Microsoft DT Icon Control ActiveX Object Access (web-client.rules)
6007 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS OrgChart GDD Layout ActiveX Object Access (web-client.rules)
6008 <-> Disabled <-> WEB-CLIENT Microsoft DT DDS OrgChart GDD Route ActiveX Object Access (web-client.rules)
6009 <-> Disabled <-> WEB-CLIENT RDS.Dataspace ActiveX Object Access (web-client.rules)
6504 <-> Disabled <-> WEB-CLIENT Sophos Anti-Virus CAB file overflow attempt (web-client.rules)
6505 <-> Disabled <-> WEB-CLIENT quicktime fpx file SectNumMiniFAT overflow attempt (web-client.rules)
6506 <-> Disabled <-> WEB-CLIENT quicktime udta atom overflow attempt (web-client.rules)
6509 <-> Disabled <-> WEB-CLIENT Internet Explorer mhtml uri href buffer overflow attempt (web-client.rules)
6510 <-> Disabled <-> WEB-CLIENT Internet Explorer mhtml uri shortcut buffer overflow attempt (web-client.rules)
6516 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Light ActiveX function call access (web-client.rules)
6517 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Light ActiveX CLSID access (web-client.rules)
6518 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Light ActiveX CLSID unicode access (web-client.rules)
6680 <-> Disabled <-> WEB-CLIENT Windows Media Transform Effects ActiveX CLSID unicode access (web-client.rules)
6681 <-> Disabled <-> WEB-CLIENT Windows Media Transform Effects ActiveX CLSID access (web-client.rules)
6682 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect2Inputs ActiveX function call access (web-client.rules)
6683 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect1Input ActiveX CLSID unicode access (web-client.rules)
6684 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect1Input ActiveX CLSID access (web-client.rules)
6685 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect2Inputs ActiveX CLSID unicode access (web-client.rules)
6686 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect2Inputs ActiveX CLSID access (web-client.rules)
6687 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MMSpecialEffect1Input ActiveX function call access (web-client.rules)
7002 <-> Disabled <-> WEB-CLIENT excel url unicode overflow attempt (web-client.rules)
7004 <-> Disabled <-> WEB-CLIENT Internet.HHCtrl.1 ActiveX function call access (web-client.rules)
7006 <-> Disabled <-> WEB-CLIENT ASControls.InstallEngineCtl ActiveX function call access (web-client.rules)
7007 <-> Disabled <-> WEB-CLIENT AxDebugger.Document.1 ActiveX function call access (web-client.rules)
7008 <-> Disabled <-> WEB-CLIENT DirectAnimation.DAUserData ActiveX function call access (web-client.rules)
7009 <-> Disabled <-> WEB-CLIENT DirectAnimation.StructuredGraphicsControl ActiveX function call access (web-client.rules)
7010 <-> Disabled <-> WEB-CLIENT HtmlDlgSafeHelper.HtmlDlgSafeHelper.1 ActiveX function call access (web-client.rules)
7011 <-> Disabled <-> WEB-CLIENT HtmlDlgSafeHelper.HtmlDlgSafeHelper ActiveX function call access (web-client.rules)
7012 <-> Disabled <-> WEB-CLIENT Internet.PopupMenu.1 ActiveX function call access (web-client.rules)
7013 <-> Disabled <-> WEB-CLIENT Microsoft.ISCatAdm ActiveX function call access (web-client.rules)
7014 <-> Disabled <-> WEB-CLIENT NMSA.ASFSourceMediaDescription.1 ActiveX function call access (web-client.rules)
7015 <-> Disabled <-> WEB-CLIENT NMSA.MediaDescription ActiveX function call access (web-client.rules)
7016 <-> Disabled <-> WEB-CLIENT Object.Microsoft.DXTFilter ActiveX function call access (web-client.rules)
7017 <-> Disabled <-> WEB-CLIENT RDS.DataControl ActiveX function call access (web-client.rules)
7018 <-> Disabled <-> WEB-CLIENT Sysmon ActiveX function call access (web-client.rules)
7023 <-> Disabled <-> WEB-CLIENT xls file download (web-client.rules)
7026 <-> Disabled <-> WEB-CLIENT RDS.Dataspace ActiveX function call access (web-client.rules)
7425 <-> Disabled <-> WEB-CLIENT 9x8Resize ActiveX CLSID access (web-client.rules)
7426 <-> Disabled <-> WEB-CLIENT 9x8Resize ActiveX CLSID unicode access (web-client.rules)
7427 <-> Disabled <-> WEB-CLIENT Allocator Fix ActiveX CLSID access (web-client.rules)
7428 <-> Disabled <-> WEB-CLIENT Allocator Fix ActiveX CLSID unicode access (web-client.rules)
7429 <-> Disabled <-> WEB-CLIENT Bitmap ActiveX CLSID access (web-client.rules)
7430 <-> Disabled <-> WEB-CLIENT Bitmap ActiveX CLSID unicode access (web-client.rules)
7431 <-> Disabled <-> WEB-CLIENT DirectFrame.DirectControl.1 ActiveX CLSID access (web-client.rules)
7432 <-> Disabled <-> WEB-CLIENT DirectFrame.DirectControl.1 ActiveX CLSID unicode access (web-client.rules)
7433 <-> Disabled <-> WEB-CLIENT DirectX Transform Wrapper Property Page ActiveX CLSID access (web-client.rules)
7434 <-> Disabled <-> WEB-CLIENT DirectX Transform Wrapper Property Page ActiveX CLSID unicode access (web-client.rules)
7435 <-> Disabled <-> WEB-CLIENT Dynamic Casts ActiveX CLSID access (web-client.rules)
7436 <-> Disabled <-> WEB-CLIENT Dynamic Casts ActiveX CLSID unicode access (web-client.rules)
7437 <-> Disabled <-> WEB-CLIENT Frame Eater ActiveX CLSID access (web-client.rules)
7438 <-> Disabled <-> WEB-CLIENT Frame Eater ActiveX CLSID unicode access (web-client.rules)
7439 <-> Disabled <-> WEB-CLIENT HTML Help ActiveX CLSID access (web-client.rules)
7440 <-> Disabled <-> WEB-CLIENT HTML Help ActiveX CLSID unicode access (web-client.rules)
7441 <-> Disabled <-> WEB-CLIENT HTML Help ActiveX CLSID unicode access (web-client.rules)
7442 <-> Disabled <-> WEB-CLIENT mmAEPlugIn.AEPlugIn.1 ActiveX CLSID access (web-client.rules)
7443 <-> Disabled <-> WEB-CLIENT mmAEPlugIn.AEPlugIn.1 ActiveX CLSID unicode access (web-client.rules)
7444 <-> Disabled <-> WEB-CLIENT Mmedia.AsyncMHandler.1 ActiveX CLSID access (web-client.rules)
7445 <-> Disabled <-> WEB-CLIENT Mmedia.AsyncMHandler.1 ActiveX CLSID unicode access (web-client.rules)
7446 <-> Disabled <-> WEB-CLIENT Record Queue ActiveX CLSID access (web-client.rules)
7447 <-> Disabled <-> WEB-CLIENT Record Queue ActiveX CLSID unicode access (web-client.rules)
7448 <-> Disabled <-> WEB-CLIENT ShotDetect ActiveX CLSID access (web-client.rules)
7449 <-> Disabled <-> WEB-CLIENT ShotDetect ActiveX CLSID unicode access (web-client.rules)
7450 <-> Disabled <-> WEB-CLIENT Stetch ActiveX CLSID access (web-client.rules)
7451 <-> Disabled <-> WEB-CLIENT Stetch ActiveX CLSID unicode access (web-client.rules)
7452 <-> Disabled <-> WEB-CLIENT WM Color Converter Filter ActiveX CLSID access (web-client.rules)
7453 <-> Disabled <-> WEB-CLIENT WM Color Converter Filter ActiveX CLSID unicode access (web-client.rules)
7454 <-> Disabled <-> WEB-CLIENT Wmm2ae.dll ActiveX CLSID access (web-client.rules)
7455 <-> Disabled <-> WEB-CLIENT Wmm2ae.dll ActiveX CLSID unicode access (web-client.rules)
7456 <-> Disabled <-> WEB-CLIENT Wmm2fxa.dll ActiveX CLSID access (web-client.rules)
7457 <-> Disabled <-> WEB-CLIENT Wmm2fxa.dll ActiveX CLSID unicode access (web-client.rules)
7458 <-> Disabled <-> WEB-CLIENT Wmm2fxb.dll ActiveX CLSID access (web-client.rules)
7459 <-> Disabled <-> WEB-CLIENT Wmm2fxb.dll ActiveX CLSID unicode access (web-client.rules)
7460 <-> Disabled <-> WEB-CLIENT WMT Audio Analyzer ActiveX CLSID access (web-client.rules)
7461 <-> Disabled <-> WEB-CLIENT WMT Audio Analyzer ActiveX CLSID unicode access (web-client.rules)
7462 <-> Disabled <-> WEB-CLIENT WMT Black Frame Generator ActiveX CLSID access (web-client.rules)
7463 <-> Disabled <-> WEB-CLIENT WMT Black Frame Generator ActiveX CLSID unicode access (web-client.rules)
7464 <-> Disabled <-> WEB-CLIENT WMT DeInterlace Filter ActiveX CLSID access (web-client.rules)
7465 <-> Disabled <-> WEB-CLIENT WMT DeInterlace Filter ActiveX CLSID unicode access (web-client.rules)
7466 <-> Disabled <-> WEB-CLIENT WMT DeInterlace Prop Page ActiveX CLSID access (web-client.rules)
7467 <-> Disabled <-> WEB-CLIENT WMT DeInterlace Prop Page ActiveX CLSID unicode access (web-client.rules)
7468 <-> Disabled <-> WEB-CLIENT WMT DirectX Transform Wrapper ActiveX CLSID access (web-client.rules)
7469 <-> Disabled <-> WEB-CLIENT WMT DirectX Transform Wrapper ActiveX CLSID unicode access (web-client.rules)
7470 <-> Disabled <-> WEB-CLIENT WMT DV Extract Filter ActiveX CLSID access (web-client.rules)
7471 <-> Disabled <-> WEB-CLIENT WMT DV Extract Filter ActiveX CLSID unicode access (web-client.rules)
7472 <-> Disabled <-> WEB-CLIENT WMT FormatConversion Prop Page ActiveX CLSID access (web-client.rules)
7473 <-> Disabled <-> WEB-CLIENT WMT FormatConversion Prop Page ActiveX CLSID unicode access (web-client.rules)
7474 <-> Disabled <-> WEB-CLIENT WMT FormatConversion ActiveX CLSID access (web-client.rules)
7475 <-> Disabled <-> WEB-CLIENT WMT FormatConversion ActiveX CLSID unicode access (web-client.rules)
7476 <-> Disabled <-> WEB-CLIENT WMT Import Filter ActiveX CLSID access (web-client.rules)
7477 <-> Disabled <-> WEB-CLIENT WMT Import Filter ActiveX CLSID unicode access (web-client.rules)
7478 <-> Disabled <-> WEB-CLIENT WMT Interlacer ActiveX CLSID access (web-client.rules)
7479 <-> Disabled <-> WEB-CLIENT WMT Interlacer ActiveX CLSID unicode access (web-client.rules)
7480 <-> Disabled <-> WEB-CLIENT WMT Log Filter ActiveX CLSID access (web-client.rules)
7481 <-> Disabled <-> WEB-CLIENT WMT Log Filter ActiveX CLSID unicode access (web-client.rules)
7482 <-> Disabled <-> WEB-CLIENT WMT MuxDeMux Filter ActiveX CLSID access (web-client.rules)
7483 <-> Disabled <-> WEB-CLIENT WMT MuxDeMux Filter ActiveX CLSID unicode access (web-client.rules)
7484 <-> Disabled <-> WEB-CLIENT WMT Sample Info Filter ActiveX CLSID access (web-client.rules)
7485 <-> Disabled <-> WEB-CLIENT WMT Sample Info Filter ActiveX CLSID unicode access (web-client.rules)
7486 <-> Disabled <-> WEB-CLIENT WMT Screen Capture Filter Task Page ActiveX CLSID access (web-client.rules)
7487 <-> Disabled <-> WEB-CLIENT WMT Screen Capture Filter Task Page ActiveX CLSID unicode access (web-client.rules)
7488 <-> Disabled <-> WEB-CLIENT WMT Screen capture Filter ActiveX CLSID access (web-client.rules)
7489 <-> Disabled <-> WEB-CLIENT WMT Screen capture Filter ActiveX CLSID unicode access (web-client.rules)
7490 <-> Disabled <-> WEB-CLIENT WMT Switch Filter ActiveX CLSID access (web-client.rules)
7491 <-> Disabled <-> WEB-CLIENT WMT Switch Filter ActiveX CLSID unicode access (web-client.rules)
7492 <-> Disabled <-> WEB-CLIENT WMT Virtual Renderer ActiveX CLSID access (web-client.rules)
7493 <-> Disabled <-> WEB-CLIENT WMT Virtual Renderer ActiveX CLSID unicode access (web-client.rules)
7494 <-> Disabled <-> WEB-CLIENT WMT Virtual Source ActiveX CLSID access (web-client.rules)
7495 <-> Disabled <-> WEB-CLIENT WMT Virtual Source ActiveX CLSID unicode access (web-client.rules)
7496 <-> Disabled <-> WEB-CLIENT WMT Volume ActiveX CLSID access (web-client.rules)
7497 <-> Disabled <-> WEB-CLIENT WMT Volume ActiveX CLSID unicode access (web-client.rules)
7498 <-> Disabled <-> WEB-CLIENT WM TV Out Smooth Picture Filter ActiveX CLSID access (web-client.rules)
7499 <-> Disabled <-> WEB-CLIENT WM TV Out Smooth Picture Filter ActiveX CLSID unicode access (web-client.rules)
7500 <-> Disabled <-> WEB-CLIENT WM VIH2 Fix ActiveX CLSID access (web-client.rules)
7501 <-> Disabled <-> WEB-CLIENT WM VIH2 Fix ActiveX CLSID unicode access (web-client.rules)
7502 <-> Disabled <-> WEB-CLIENT tsuserex.ADsTSUserEx.1 ActiveX CLSID access (web-client.rules)
7503 <-> Disabled <-> WEB-CLIENT tsuserex.ADsTSUserEx.1 ActiveX CLSID unicode access (web-client.rules)
7862 <-> Disabled <-> WEB-CLIENT McSubMgr.IsAppExpired ActiveX function call access (web-client.rules)
7863 <-> Disabled <-> WEB-CLIENT McSubMgr.IsOldAppInstalled ActiveX function call access (web-client.rules)
7864 <-> Disabled <-> WEB-CLIENT McSubMgr ActiveX CLSID access (web-client.rules)
7865 <-> Disabled <-> WEB-CLIENT McSubMgr ActiveX CLSID unicode access (web-client.rules)
7866 <-> Disabled <-> WEB-CLIENT ADODB.Connection ActiveX CLSID access (web-client.rules)
7867 <-> Disabled <-> WEB-CLIENT ADODB.Connection ActiveX CLSID unicode access (web-client.rules)
7868 <-> Disabled <-> WEB-CLIENT ADODB.Recordset ActiveX CLSID access (web-client.rules)
7869 <-> Disabled <-> WEB-CLIENT ADODB.Recordset ActiveX CLSID unicode access (web-client.rules)
7870 <-> Disabled <-> WEB-CLIENT Microsoft Office Data Source Control 9.0 ActiveX CLSID access (web-client.rules)
7871 <-> Disabled <-> WEB-CLIENT Microsoft Office Data Source Control 9.0 ActiveX CLSID unicode access (web-client.rules)
7872 <-> Disabled <-> WEB-CLIENT Microsoft Office Spreadsheet 10.0 ActiveX CLSID access (web-client.rules)
7873 <-> Disabled <-> WEB-CLIENT Microsoft Office Spreadsheet 10.0 ActiveX CLSID unicode access (web-client.rules)
7874 <-> Disabled <-> WEB-CLIENT Microsoft Office PivotTable 10.0 ActiveX CLSID access (web-client.rules)
7875 <-> Disabled <-> WEB-CLIENT Microsoft Office PivotTable 10.0 ActiveX CLSID unicode access (web-client.rules)
7876 <-> Disabled <-> WEB-CLIENT Microsoft Office Data Source Control 10.0 ActiveX CLSID access (web-client.rules)
7877 <-> Disabled <-> WEB-CLIENT Microsoft Office Data Source Control 10.0 ActiveX CLSID unicode access (web-client.rules)
7878 <-> Disabled <-> WEB-CLIENT AxMetaStream.MetaStreamCtl ActiveX CLSID access (web-client.rules)
7879 <-> Disabled <-> WEB-CLIENT AxMetaStream.MetaStreamCtl ActiveX CLSID unicode access (web-client.rules)
7880 <-> Disabled <-> WEB-CLIENT AxMetaStream.MetaStreamCtlSecondary ActiveX CLSID access (web-client.rules)
7881 <-> Disabled <-> WEB-CLIENT AxMetaStream.MetaStreamCtlSecondary ActiveX CLSID unicode access (web-client.rules)
7882 <-> Disabled <-> WEB-CLIENT AccSync.AccSubNotHandler ActiveX CLSID access (web-client.rules)
7883 <-> Disabled <-> WEB-CLIENT AccSync.AccSubNotHandler ActiveX CLSID unicode access (web-client.rules)
7884 <-> Disabled <-> WEB-CLIENT AolCalSvr.ACCalendarListCtrl ActiveX CLSID access (web-client.rules)
7885 <-> Disabled <-> WEB-CLIENT AolCalSvr.ACCalendarListCtrl ActiveX CLSID unicode access (web-client.rules)
7886 <-> Disabled <-> WEB-CLIENT AolCalSvr.ACDictionary ActiveX CLSID access (web-client.rules)
7887 <-> Disabled <-> WEB-CLIENT AolCalSvr.ACDictionary ActiveX CLSID unicode access (web-client.rules)
7888 <-> Disabled <-> WEB-CLIENT AOLFlash.AOLFlash ActiveX CLSID access (web-client.rules)
7889 <-> Disabled <-> WEB-CLIENT AOLFlash.AOLFlash ActiveX CLSID unicode access (web-client.rules)
7890 <-> Disabled <-> WEB-CLIENT AOL.MemExpWz ActiveX CLSID access (web-client.rules)
7891 <-> Disabled <-> WEB-CLIENT AOL.MemExpWz ActiveX CLSID unicode access (web-client.rules)
7892 <-> Disabled <-> WEB-CLIENT AOL Phobos Class ActiveX CLSID access (web-client.rules)
7893 <-> Disabled <-> WEB-CLIENT AOL Phobos Class ActiveX CLSID unicode access (web-client.rules)
7894 <-> Disabled <-> WEB-CLIENT AOL.PicDownloadCtrl ActiveX CLSID access (web-client.rules)
7895 <-> Disabled <-> WEB-CLIENT AOL.PicDownloadCtrl ActiveX CLSID unicode access (web-client.rules)
7896 <-> Disabled <-> WEB-CLIENT AOL.PicEditCtrl ActiveX CLSID access (web-client.rules)
7897 <-> Disabled <-> WEB-CLIENT AOL.PicEditCtrl ActiveX CLSID unicode access (web-client.rules)
7898 <-> Disabled <-> WEB-CLIENT AOL.PicSsvrCtrl ActiveX CLSID access (web-client.rules)
7899 <-> Disabled <-> WEB-CLIENT AOL.PicSsvrCtrl ActiveX CLSID unicode access (web-client.rules)
7900 <-> Disabled <-> WEB-CLIENT AOL.UPFCtrl ActiveX CLSID access (web-client.rules)
7901 <-> Disabled <-> WEB-CLIENT AOL.UPFCtrl ActiveX CLSID unicode access (web-client.rules)
7902 <-> Disabled <-> WEB-CLIENT CDDBControlAOL.CDDBAOLControl ActiveX CLSID access (web-client.rules)
7903 <-> Disabled <-> WEB-CLIENT CDDBControlAOL.CDDBAOLControl ActiveX CLSID unicode access (web-client.rules)
7904 <-> Disabled <-> WEB-CLIENT CDL Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7905 <-> Disabled <-> WEB-CLIENT CDL Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7906 <-> Disabled <-> WEB-CLIENT CDO.KnowledgeSearchFolder ActiveX CLSID access (web-client.rules)
7907 <-> Disabled <-> WEB-CLIENT CDO.KnowledgeSearchFolder ActiveX CLSID unicode access (web-client.rules)
7908 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Chroma ActiveX CLSID access (web-client.rules)
7909 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Chroma ActiveX CLSID unicode access (web-client.rules)
7910 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.DropShadow ActiveX CLSID access (web-client.rules)
7911 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.DropShadow ActiveX CLSID unicode access (web-client.rules)
7912 <-> Disabled <-> WEB-CLIENT DX3DTransform.Microsoft.Shapes ActiveX CLSID access (web-client.rules)
7913 <-> Disabled <-> WEB-CLIENT DX3DTransform.Microsoft.Shapes ActiveX CLSID unicode access (web-client.rules)
7914 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.NDFXArtEffects ActiveX CLSID access (web-client.rules)
7915 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.NDFXArtEffects ActiveX CLSID unicode access (web-client.rules)
7916 <-> Disabled <-> WEB-CLIENT CLSID_IMimeInternational ActiveX CLSID access (web-client.rules)
7917 <-> Disabled <-> WEB-CLIENT CLSID_IMimeInternational ActiveX CLSID unicode access (web-client.rules)
7918 <-> Disabled <-> WEB-CLIENT CoAxTrackVideo Class ActiveX CLSID access (web-client.rules)
7919 <-> Disabled <-> WEB-CLIENT CoAxTrackVideo Class ActiveX CLSID unicode access (web-client.rules)
7920 <-> Disabled <-> WEB-CLIENT DsPropertyPages.OU ActiveX CLSID access (web-client.rules)
7921 <-> Disabled <-> WEB-CLIENT DsPropertyPages.OU ActiveX CLSID unicode access (web-client.rules)
7922 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.RevealTrans ActiveX CLSID access (web-client.rules)
7923 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.RevealTrans ActiveX CLSID unicode access (web-client.rules)
7924 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Shadow ActiveX CLSID access (web-client.rules)
7925 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Shadow ActiveX CLSID unicode access (web-client.rules)
7926 <-> Disabled <-> WEB-CLIENT DXTFilter ActiveX CLSID access (web-client.rules)
7927 <-> Disabled <-> WEB-CLIENT DXTFilter ActiveX CLSID unicode access (web-client.rules)
7928 <-> Disabled <-> WEB-CLIENT file or local Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7929 <-> Disabled <-> WEB-CLIENT file or local Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7930 <-> Disabled <-> WEB-CLIENT FolderItem2 ActiveX CLSID access (web-client.rules)
7931 <-> Disabled <-> WEB-CLIENT FolderItem2 ActiveX CLSID unicode access (web-client.rules)
7932 <-> Disabled <-> WEB-CLIENT FolderItems3 ActiveX CLSID access (web-client.rules)
7933 <-> Disabled <-> WEB-CLIENT FolderItems3 ActiveX CLSID unicode access (web-client.rules)
7934 <-> Disabled <-> WEB-CLIENT ftp Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7935 <-> Disabled <-> WEB-CLIENT ftp Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7936 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Glow ActiveX CLSID access (web-client.rules)
7937 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Glow ActiveX CLSID unicode access (web-client.rules)
7938 <-> Disabled <-> WEB-CLIENT gopher Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7939 <-> Disabled <-> WEB-CLIENT gopher Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7940 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Gradient ActiveX CLSID access (web-client.rules)
7941 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Gradient ActiveX CLSID unicode access (web-client.rules)
7942 <-> Disabled <-> WEB-CLIENT http Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7943 <-> Disabled <-> WEB-CLIENT http Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7944 <-> Disabled <-> WEB-CLIENT https Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7945 <-> Disabled <-> WEB-CLIENT https Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7946 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MaskFilter ActiveX CLSID access (web-client.rules)
7947 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.MaskFilter ActiveX CLSID unicode access (web-client.rules)
7948 <-> Disabled <-> WEB-CLIENT Microsoft Common Browser Architecture ActiveX CLSID access (web-client.rules)
7949 <-> Disabled <-> WEB-CLIENT Microsoft Common Browser Architecture ActiveX CLSID unicode access (web-client.rules)
7950 <-> Disabled <-> WEB-CLIENT Microsoft DirectAnimation Control ActiveX CLSID access (web-client.rules)
7951 <-> Disabled <-> WEB-CLIENT Microsoft DirectAnimation Control ActiveX CLSID unicode access (web-client.rules)
7952 <-> Disabled <-> WEB-CLIENT Microsoft DirectAnimation Windowed Control ActiveX CLSID access (web-client.rules)
7953 <-> Disabled <-> WEB-CLIENT Microsoft DirectAnimation Windowed Control ActiveX CLSID unicode access (web-client.rules)
7954 <-> Disabled <-> WEB-CLIENT Microsoft Forms 2.0 ComboBox ActiveX CLSID access (web-client.rules)
7955 <-> Disabled <-> WEB-CLIENT Microsoft Forms 2.0 ComboBox ActiveX CLSID unicode access (web-client.rules)
7956 <-> Disabled <-> WEB-CLIENT Microsoft Forms 2.0 ListBox ActiveX CLSID access (web-client.rules)
7957 <-> Disabled <-> WEB-CLIENT Microsoft Forms 2.0 ListBox ActiveX CLSID unicode access (web-client.rules)
7958 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7959 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7960 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7961 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7962 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7963 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7964 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7965 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7966 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7967 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7968 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID access (web-client.rules)
7969 <-> Disabled <-> WEB-CLIENT mk Asychronous Pluggable Protocol Handler ActiveX CLSID unicode access (web-client.rules)
7970 <-> Disabled <-> WEB-CLIENT PostBootReminder object ActiveX CLSID access (web-client.rules)
7971 <-> Disabled <-> WEB-CLIENT PostBootReminder object ActiveX CLSID unicode access (web-client.rules)
7972 <-> Disabled <-> WEB-CLIENT RealPlayer G2 Control ActiveX CLSID access (web-client.rules)
7973 <-> Disabled <-> WEB-CLIENT RealPlayer G2 Control ActiveX CLSID unicode access (web-client.rules)
7974 <-> Disabled <-> WEB-CLIENT Rendezvous Class ActiveX CLSID access (web-client.rules)
7975 <-> Disabled <-> WEB-CLIENT Rendezvous Class ActiveX CLSID unicode access (web-client.rules)
7976 <-> Disabled <-> WEB-CLIENT ShellFolder for CD Burning ActiveX CLSID access (web-client.rules)
7977 <-> Disabled <-> WEB-CLIENT ShellFolder for CD Burning ActiveX CLSID unicode access (web-client.rules)
7978 <-> Disabled <-> WEB-CLIENT ShockwaveFlash.ShockwaveFlash ActiveX CLSID access (web-client.rules)
7979 <-> Disabled <-> WEB-CLIENT ShockwaveFlash.ShockwaveFlash ActiveX CLSID unicode access (web-client.rules)
7980 <-> Disabled <-> WEB-CLIENT ShockwaveFlash.ShockwaveFlash.9 ActiveX function call access (web-client.rules)
7981 <-> Disabled <-> WEB-CLIENT Snapshot Viewer General Property Page Object ActiveX CLSID access (web-client.rules)
7982 <-> Disabled <-> WEB-CLIENT Snapshot Viewer General Property Page Object ActiveX CLSID unicode access (web-client.rules)
7983 <-> Disabled <-> WEB-CLIENT SuperBuddy Class ActiveX CLSID access (web-client.rules)
7984 <-> Disabled <-> WEB-CLIENT SuperBuddy Class ActiveX CLSID unicode access (web-client.rules)
7985 <-> Disabled <-> WEB-CLIENT WebViewFolderIcon.WebViewFolderIcon.1 ActiveX CLSID access (web-client.rules)
7986 <-> Disabled <-> WEB-CLIENT WebViewFolderIcon.WebViewFolderIcon.1 ActiveX CLSID unicode access (web-client.rules)
7987 <-> Disabled <-> WEB-CLIENT WebViewFolderIcon.WebViewFolderIcon.2 ActiveX CLSID access (web-client.rules)
7988 <-> Disabled <-> WEB-CLIENT WebViewFolderIcon.WebViewFolderIcon.2 ActiveX CLSID unicode access (web-client.rules)
7989 <-> Disabled <-> WEB-CLIENT WIA FileSystem USD ActiveX CLSID access (web-client.rules)
7990 <-> Disabled <-> WEB-CLIENT WIA FileSystem USD ActiveX CLSID unicode access (web-client.rules)
7991 <-> Disabled <-> WEB-CLIENT ACM Class Manager ActiveX CLSID access (web-client.rules)
7992 <-> Disabled <-> WEB-CLIENT ACM Class Manager ActiveX CLSID unicode access (web-client.rules)
7993 <-> Disabled <-> WEB-CLIENT clbcatex.dll ActiveX CLSID access (web-client.rules)
7994 <-> Disabled <-> WEB-CLIENT clbcatex.dll ActiveX CLSID unicode access (web-client.rules)
7995 <-> Disabled <-> WEB-CLIENT clbcatq.dll ActiveX CLSID access (web-client.rules)
7996 <-> Disabled <-> WEB-CLIENT clbcatq.dll ActiveX CLSID unicode access (web-client.rules)
7997 <-> Disabled <-> WEB-CLIENT CLSID_ApprenticeICW ActiveX CLSID access (web-client.rules)
7998 <-> Disabled <-> WEB-CLIENT CLSID_ApprenticeICW ActiveX CLSID unicode access (web-client.rules)
7999 <-> Disabled <-> WEB-CLIENT CLSID_CDIDeviceActionConfigPage ActiveX CLSID access (web-client.rules)
8000 <-> Disabled <-> WEB-CLIENT CLSID_CDIDeviceActionConfigPage ActiveX CLSID unicode access (web-client.rules)
8001 <-> Disabled <-> WEB-CLIENT CommunicationManager ActiveX CLSID access (web-client.rules)
8002 <-> Disabled <-> WEB-CLIENT CommunicationManager ActiveX CLSID unicode access (web-client.rules)
8003 <-> Disabled <-> WEB-CLIENT Content.mbcontent.1 ActiveX CLSID access (web-client.rules)
8004 <-> Disabled <-> WEB-CLIENT Content.mbcontent.1 ActiveX CLSID unicode access (web-client.rules)
8005 <-> Disabled <-> WEB-CLIENT DiskManagement.Connection ActiveX CLSID access (web-client.rules)
8006 <-> Disabled <-> WEB-CLIENT DiskManagement.Connection ActiveX CLSID unicode access (web-client.rules)
8007 <-> Disabled <-> WEB-CLIENT Dutch_Dutch Stemmer ActiveX CLSID access (web-client.rules)
8008 <-> Disabled <-> WEB-CLIENT Dutch_Dutch Stemmer ActiveX CLSID unicode access (web-client.rules)
8009 <-> Disabled <-> WEB-CLIENT English_UK Stemmer ActiveX CLSID access (web-client.rules)
8010 <-> Disabled <-> WEB-CLIENT English_UK Stemmer ActiveX CLSID unicode access (web-client.rules)
8011 <-> Disabled <-> WEB-CLIENT English_US Stemmer ActiveX CLSID access (web-client.rules)
8012 <-> Disabled <-> WEB-CLIENT English_US Stemmer ActiveX CLSID unicode access (web-client.rules)
8013 <-> Disabled <-> WEB-CLIENT French_French Stemmer ActiveX CLSID access (web-client.rules)
8014 <-> Disabled <-> WEB-CLIENT French_French Stemmer ActiveX CLSID unicode access (web-client.rules)
8015 <-> Disabled <-> WEB-CLIENT German_German Stemmer ActiveX CLSID access (web-client.rules)
8016 <-> Disabled <-> WEB-CLIENT German_German Stemmer ActiveX CLSID unicode access (web-client.rules)
8017 <-> Disabled <-> WEB-CLIENT ICM Class Manager ActiveX CLSID access (web-client.rules)
8018 <-> Disabled <-> WEB-CLIENT ICM Class Manager ActiveX CLSID unicode access (web-client.rules)
8019 <-> Disabled <-> WEB-CLIENT Internet Explorer Address Bar ActiveX CLSID access (web-client.rules)
8020 <-> Disabled <-> WEB-CLIENT Internet Explorer Address Bar ActiveX CLSID unicode access (web-client.rules)
8021 <-> Disabled <-> WEB-CLIENT ISSimpleCommandCreator.1 ActiveX CLSID access (web-client.rules)
8022 <-> Disabled <-> WEB-CLIENT ISSimpleCommandCreator.1 ActiveX CLSID unicode access (web-client.rules)
8023 <-> Disabled <-> WEB-CLIENT Italian_Italian Stemmer ActiveX CLSID access (web-client.rules)
8024 <-> Disabled <-> WEB-CLIENT Italian_Italian Stemmer ActiveX CLSID unicode access (web-client.rules)
8025 <-> Disabled <-> WEB-CLIENT Microsoft HTML Window Security Proxy ActiveX CLSID access (web-client.rules)
8026 <-> Disabled <-> WEB-CLIENT Microsoft HTML Window Security Proxy ActiveX CLSID unicode access (web-client.rules)
8027 <-> Disabled <-> WEB-CLIENT Microsoft WBEM Event Subsystem ActiveX CLSID access (web-client.rules)
8028 <-> Disabled <-> WEB-CLIENT Microsoft WBEM Event Subsystem ActiveX CLSID unicode access (web-client.rules)
8029 <-> Disabled <-> WEB-CLIENT MidiOut Class Manager ActiveX CLSID access (web-client.rules)
8030 <-> Disabled <-> WEB-CLIENT MidiOut Class Manager ActiveX CLSID unicode access (web-client.rules)
8031 <-> Disabled <-> WEB-CLIENT Mslablti.MarshalableTI.1 ActiveX CLSID access (web-client.rules)
8032 <-> Disabled <-> WEB-CLIENT Mslablti.MarshalableTI.1 ActiveX CLSID unicode access (web-client.rules)
8033 <-> Disabled <-> WEB-CLIENT QC.MessageMover.1 ActiveX CLSID access (web-client.rules)
8034 <-> Disabled <-> WEB-CLIENT QC.MessageMover.1 ActiveX CLSID unicode access (web-client.rules)
8035 <-> Disabled <-> WEB-CLIENT Spanish_Modern Stemmer ActiveX CLSID access (web-client.rules)
8036 <-> Disabled <-> WEB-CLIENT Spanish_Modern Stemmer ActiveX CLSID unicode access (web-client.rules)
8037 <-> Disabled <-> WEB-CLIENT Swedish_Default Stemmer ActiveX CLSID access (web-client.rules)
8038 <-> Disabled <-> WEB-CLIENT Swedish_Default Stemmer ActiveX CLSID unicode access (web-client.rules)
8039 <-> Disabled <-> WEB-CLIENT syncui.dll ActiveX CLSID access (web-client.rules)
8040 <-> Disabled <-> WEB-CLIENT syncui.dll ActiveX CLSID unicode access (web-client.rules)
8041 <-> Disabled <-> WEB-CLIENT VFW Capture Class Manager ActiveX CLSID access (web-client.rules)
8042 <-> Disabled <-> WEB-CLIENT VFW Capture Class Manager ActiveX CLSID unicode access (web-client.rules)
8043 <-> Disabled <-> WEB-CLIENT Video Effect Class Manager 1 Input ActiveX CLSID access (web-client.rules)
8044 <-> Disabled <-> WEB-CLIENT Video Effect Class Manager 1 Input ActiveX CLSID unicode access (web-client.rules)
8045 <-> Disabled <-> WEB-CLIENT Video Effect Class Manager 2 Input ActiveX CLSID access (web-client.rules)
8046 <-> Disabled <-> WEB-CLIENT Video Effect Class Manager 2 Input ActiveX CLSID unicode access (web-client.rules)
8047 <-> Disabled <-> WEB-CLIENT WaveIn Class Manager ActiveX CLSID access (web-client.rules)
8048 <-> Disabled <-> WEB-CLIENT WaveIn Class Manager ActiveX CLSID unicode access (web-client.rules)
8049 <-> Disabled <-> WEB-CLIENT WaveOut and DSound Class Manager ActiveX CLSID access (web-client.rules)
8050 <-> Disabled <-> WEB-CLIENT WaveOut and DSound Class Manager ActiveX CLSID unicode access (web-client.rules)
8051 <-> Disabled <-> WEB-CLIENT WDM Instance Provider ActiveX CLSID access (web-client.rules)
8052 <-> Disabled <-> WEB-CLIENT WDM Instance Provider ActiveX CLSID unicode access (web-client.rules)
8053 <-> Disabled <-> WEB-CLIENT DirectAnimation.PathControl ActiveX CLSID access (web-client.rules)
8054 <-> Disabled <-> WEB-CLIENT DirectAnimation.PathControl ActiveX CLSID unicode access (web-client.rules)
8055 <-> Disabled <-> WEB-CLIENT DirectAnimation.PathControl ActiveX function call access (web-client.rules)
8058 <-> Disabled <-> WEB-CLIENT Mozilla javascript navigator object access (web-client.rules)
8061 <-> Disabled <-> WEB-CLIENT ADODB.Stream ActiveX CLSID access (web-client.rules)
8062 <-> Disabled <-> WEB-CLIENT ADODB.Stream ActiveX CLSID unicode access (web-client.rules)
8063 <-> Disabled <-> WEB-CLIENT ADODB.Stream ActiveX function call access (web-client.rules)
8064 <-> Disabled <-> WEB-CLIENT Scriptlet.Typelib ActiveX CLSID access (web-client.rules)
8065 <-> Disabled <-> WEB-CLIENT Scriptlet.Typelib ActiveX CLSID unicode access (web-client.rules)
8066 <-> Disabled <-> WEB-CLIENT Windows Scripting Host Shell ActiveX CLSID access (web-client.rules)
8067 <-> Disabled <-> WEB-CLIENT Windows Scripting Host Shell ActiveX CLSID unicode access (web-client.rules)
8068 <-> Disabled <-> WEB-CLIENT Windows Scripting Host Shell ActiveX function call access (web-client.rules)
8069 <-> Disabled <-> WEB-CLIENT Microsoft Virtual Machine ActiveX CLSID access (web-client.rules)
8070 <-> Disabled <-> WEB-CLIENT Microsoft Virtual Machine ActiveX CLSID unicode access (web-client.rules)
8091 <-> Disabled <-> WEB-CLIENT RealPlayer Realpix file format string overflow attempt (web-client.rules)
8363 <-> Disabled <-> WEB-CLIENT Business Object Factory ActiveX CLSID access (web-client.rules)
8364 <-> Disabled <-> WEB-CLIENT Business Object Factory ActiveX CLSID unicode access (web-client.rules)
8365 <-> Disabled <-> WEB-CLIENT DExplore.AppObj.8.0 ActiveX CLSID access (web-client.rules)
8366 <-> Disabled <-> WEB-CLIENT DExplore.AppObj.8.0 ActiveX CLSID unicode access (web-client.rules)
8367 <-> Disabled <-> WEB-CLIENT Microsoft.DbgClr.DTE.8.0 ActiveX CLSID access (web-client.rules)
8368 <-> Disabled <-> WEB-CLIENT Microsoft.DbgClr.DTE.8.0 ActiveX CLSID unicode access (web-client.rules)
8369 <-> Disabled <-> WEB-CLIENT WMIScriptUtils.WMIObjectBroker2.1 ActiveX CLSID access (web-client.rules)
8370 <-> Disabled <-> WEB-CLIENT WMIScriptUtils.WMIObjectBroker2.1 ActiveX CLSID unicode access (web-client.rules)
8371 <-> Disabled <-> WEB-CLIENT Outlook.Application ActiveX CLSID access (web-client.rules)
8372 <-> Disabled <-> WEB-CLIENT Outlook.Application ActiveX CLSID unicode access (web-client.rules)
8373 <-> Disabled <-> WEB-CLIENT VsmIDE.DTE ActiveX CLSID access (web-client.rules)
8374 <-> Disabled <-> WEB-CLIENT VsmIDE.DTE ActiveX CLSID unicode access (web-client.rules)
8375 <-> Disabled <-> WEB-CLIENT QuickTime Object ActiveX CLSID access (web-client.rules)
8376 <-> Disabled <-> WEB-CLIENT QuickTime Object ActiveX CLSID unicode access (web-client.rules)
8377 <-> Disabled <-> WEB-CLIENT RealPlayer Download Handler ActiveX CLSID access (web-client.rules)
8378 <-> Disabled <-> WEB-CLIENT RealPlayer Download Handler ActiveX CLSID unicode access (web-client.rules)
8379 <-> Disabled <-> WEB-CLIENT Xml2Dex ActiveX CLSID access (web-client.rules)
8380 <-> Disabled <-> WEB-CLIENT Xml2Dex ActiveX CLSID unicode access (web-client.rules)
8381 <-> Disabled <-> WEB-CLIENT RealPlayer SMIL Download Handler ActiveX CLSID access (web-client.rules)
8382 <-> Disabled <-> WEB-CLIENT RealPlayer SMIL Download Handler ActiveX CLSID unicode access (web-client.rules)
8383 <-> Disabled <-> WEB-CLIENT RealPlayer RAM Download Handler ActiveX CLSID access (web-client.rules)
8384 <-> Disabled <-> WEB-CLIENT RealPlayer RAM Download Handler ActiveX CLSID unicode access (web-client.rules)
8385 <-> Disabled <-> WEB-CLIENT RealPlayer Playback Handler ActiveX CLSID access (web-client.rules)
8386 <-> Disabled <-> WEB-CLIENT RealPlayer Playback Handler ActiveX CLSID unicode access (web-client.rules)
8387 <-> Disabled <-> WEB-CLIENT RealPlayer RNX Download Handler ActiveX CLSID access (web-client.rules)
8388 <-> Disabled <-> WEB-CLIENT RealPlayer RNX Download Handler ActiveX CLSID unicode access (web-client.rules)
8389 <-> Disabled <-> WEB-CLIENT RealPlayer RMP Download Handler ActiveX CLSID access (web-client.rules)
8390 <-> Disabled <-> WEB-CLIENT RealPlayer RMP Download Handler ActiveX CLSID unicode access (web-client.rules)
8391 <-> Disabled <-> WEB-CLIENT RFXInstMgr Class ActiveX CLSID access (web-client.rules)
8392 <-> Disabled <-> WEB-CLIENT RFXInstMgr Class ActiveX CLSID unicode access (web-client.rules)
8393 <-> Disabled <-> WEB-CLIENT WebDetectFrm ActiveX CLSID access (web-client.rules)
8394 <-> Disabled <-> WEB-CLIENT WebDetectFrm ActiveX CLSID unicode access (web-client.rules)
8395 <-> Disabled <-> WEB-CLIENT DX3DTransform.Microsoft.CrShatter ActiveX CLSID access (web-client.rules)
8396 <-> Disabled <-> WEB-CLIENT DX3DTransform.Microsoft.CrShatter ActiveX CLSID unicode access (web-client.rules)
8397 <-> Disabled <-> WEB-CLIENT Microsoft Office List 11.0 ActiveX CLSID access (web-client.rules)
8398 <-> Disabled <-> WEB-CLIENT Microsoft Office List 11.0 ActiveX CLSID unicode access (web-client.rules)
8399 <-> Disabled <-> WEB-CLIENT Microsoft.WebCapture ActiveX CLSID access (web-client.rules)
8400 <-> Disabled <-> WEB-CLIENT Microsoft.WebCapture ActiveX CLSID unicode access (web-client.rules)
8401 <-> Disabled <-> WEB-CLIENT Windows Media Services DRM Storage ActiveX CLSID access (web-client.rules)
8402 <-> Disabled <-> WEB-CLIENT Windows Media Services DRM Storage ActiveX CLSID unicode access (web-client.rules)
8403 <-> Disabled <-> WEB-CLIENT XML Schmea Cache 6.0 ActiveX CLSID access (web-client.rules)
8404 <-> Disabled <-> WEB-CLIENT XML Schmea Cache 6.0 ActiveX CLSID unicode access (web-client.rules)
8405 <-> Disabled <-> WEB-CLIENT XML HTTP 6.0 ActiveX CLSID access (web-client.rules)
8406 <-> Disabled <-> WEB-CLIENT XML HTTP 6.0 ActiveX CLSID unicode access (web-client.rules)
8407 <-> Disabled <-> WEB-CLIENT VisualExec Control ActiveX CLSID access (web-client.rules)
8408 <-> Disabled <-> WEB-CLIENT VisualExec Control ActiveX CLSID unicode access (web-client.rules)
8409 <-> Disabled <-> WEB-CLIENT RealPlayer Stream Handler ActiveX CLSID access (web-client.rules)
8410 <-> Disabled <-> WEB-CLIENT RealPlayer Stream Handler ActiveX CLSID unicode access (web-client.rules)
8411 <-> Disabled <-> WEB-CLIENT DocFind Command ActiveX CLSID access (web-client.rules)
8412 <-> Disabled <-> WEB-CLIENT DocFind Command ActiveX CLSID unicode access (web-client.rules)
8416 <-> Disabled <-> WEB-CLIENT VML fill method overflow attempt (web-client.rules)
8417 <-> Disabled <-> WEB-CLIENT TriEditDocument.TriEditDocument ActiveX function call access (web-client.rules)
8418 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.RevealTrans ActiveX function call access (web-client.rules)
8419 <-> Disabled <-> WEB-CLIENT WebViewFolderIcon.WebViewFolderIcon.1 ActiveX function call access (web-client.rules)
8420 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.Gradient ActiveX function call access (web-client.rules)
8421 <-> Disabled <-> WEB-CLIENT OWC11.DataSourceControl.11 ActiveX function call access (web-client.rules)
8422 <-> Disabled <-> WEB-CLIENT OVCtl.OVCtl.1 ActiveX function call access (web-client.rules)
8423 <-> Disabled <-> WEB-CLIENT CEnroll.CEnroll.2 ActiveX function call access (web-client.rules)
8424 <-> Disabled <-> WEB-CLIENT Microsoft Forms 2.0 ListBox ActiveX function call access (web-client.rules)
8425 <-> Disabled <-> WEB-CLIENT DXImageTransform.Microsoft.NDFXArtEffects ActiveX function call access (web-client.rules)
8448 <-> Disabled <-> WEB-CLIENT Excel colinfo XF record overflow attempt (web-client.rules)