sigs_0411

download sigs_0411

If you can't read please download the document

Transcript of sigs_0411

SIG1=101,"Winlogon ",""SIG2=102,"Winlogon ",""SIG3=103,"LSA ",""SIG4=104,"LSA ",""SIG5=105,"Memory Management ",""SIG6=106,"Memory Management ",""SIG7=107,"CrashControl ",""SIG8=108,"CrashControl ",""SIG9=111," ",""SIG10=112," ",""SIG11=113," ",""SIG12=114," ",""SIG13=121,"Windows File Protection ",""SIG14=122,"Windows File Protection !"#",""SIG15=123,"Source Path ",""SIG16=131,"$%&'()*+,-./0",""SIG17=132,"$%&'()*+12345678",""SIG18=338,"9:;?@",""SIG19=342,"ABC.4$ DEF",""SIG20=344,"GH9:DI$12",""SIG21=345," JKL.MN",""SIG22=347,"OPQRS)T,>?@",""SIG23=348,"Notification Packages ",""SIG24=349,"OPQRS CD-ROM ,>?@",""SIG25=350,"O=C >?@",""SIG26=352,"Null UV W>?@",""SIG27=354,"Drive AutoPlay ",""SIG28=355,"AllowSpecialCharsInShell ",""SIG29=356,"IIS Shielding - CGI D X ",""SIG30=357,"IIS Shielding - Y ODBC 12",""SIG31=367,"IIS Shielding - EnablePortAttack ",""SIG32=371,""+ IP +>?@",""SIG33=372,"SNMP 9:",""SIG34=373,"SNMP 9:YZ",""SIG35=374,"Remote Command 9:",""SIG36=375,"Remote Command 9:YZ",""SIG37=379,"Alerter 9:",""SIG38=380,"Alerter 9:YZ",""SIG39=384,"NETMON Network Agent 9:",""SIG40=385,"NETMON Network Agent 9:YZ",""SIG41=392,"9:[\]",""SIG42=393,"^_[\]",""SIG43=399,"Remote Shell +",""SIG44=404,"Authentication Packages ",""SIG45=412,"2 `abc%&)*+",""SIG46=413,"deS 2 `abcfgh)*+%&",""SIG47=415,"deS)*+abc%&",""SIG48=428,"EiRSj)* =j)",""SIG49=431,"IIS 4.0 FTP j)* =j)",""SIG50=432,"deSkl9:",""SIG51=433,"9:[\] Remote Shell ",""SIG52=436,"OS/2 m$ n#",""SIG53=437,"POSIX m$ n#",""SIG54=438,"Pagefile o?@",""SIG55=445,"ProfileImagePath ",""SIG56=500,"MSSQL Core shielding )*+,",""SIG57=501,"MSSQL Core shielding )*+",""SIG58=502,"MSSQL Core shielding )*+%&",""SIG59=503,"MSSQL Core Shielding - ",""SIG60=504,"MSSQL Core Shielding - ",""SIG61=505,"MSSQL Core Shielding - ",""SIG62=507,"MSSQL Core Shielding - )*+,",""SIG63=508,"MSSQL Core Shielding - )*+",""SIG64=510,"MSSQL Aux.Shielding )*+,",""SIG65=511,"MSSQL Aux.Shielding )*+",""SIG66=512,"MSSQL Aux.Shielding )*+%&",""SIG67=513,"MSSQL Aux.Shielding - ",""SIG68=514,"MSSQL Aux.Shielding - ",""SIG69=515,"MSSQL Aux.Shielding - ",""SIG70=519,"MSSQL Aux.Shielding - 9:[\]",""SIG71=520,"MSSQL Core Envelope - MSSQL pq4)*+,",""SIG72=521,"MSSQL Core Envelope - MSSQL pq4)*+",""SIG73=522,"MSSQL Core Envelope - MSSQL pq4)*+%&",""SIG74=523,"MSSQL Core Envelope - MSSQL pq4",""SIG75=524,"MSSQL Core Envelope - MSSQL pq4",""SIG76=530,"MSSQL Aux.Envelope - MSSQL pq4)*+,",""SIG77=531,"MSSQL Aux.Envelope - MSSQL pq4)*+",""SIG78=532,"MSSQL Aux.Envelope - MSSQL pq4)*+%&",""SIG79=533,"MSSQL Aux.Envelope - MSSQL pq4",""SIG80=534,"MSSQL Aux.Envelope - MSSQL pq4",""SIG81=540,"MSSQL Z D j)* =j)",""SIG82=541,"MSSQL j + )*+rst",""SIG83=542,"MSSQL uvwxZ ",""SIG84=550,"MSSQL yz[\]{",""SIG85=551,"X|}. MSSQL SQL ~W",""SIG86=552,"DELAY f MSSQL SQL ~W",""SIG87=553,"BULK INSERT f MSSQL SQL ~W",""SIG88=554,"j XZf MSSQL SQL ~W",""SIG89=555,"Audit Evasion f MSSQL SQL ~W",""SIG90=556,"MSSQL SQL ",""SIG91=557,"MSSQL Wm +",""SIG92=558,"MSSQL sp_MScopyscriptfile K",""SIG93=559,"MSSQL sp_attachsubscription K",""SIG94=560,"SQL Injection With CAST",""SIG95=561,"MSSQL xp_cmdshell K",""SIG96=562,"MSSQL xp_availablemedia K",""SIG97=563,"MSSQL xp_dirtree K",""SIG98=564,"MSSQL xp_subdirs K",""SIG99=565,"MSSQL xp_fileexist K",""SIG100=566,"MSSQL xp_getfiledetails K",""SIG101=567,"MSSQL sp_OACreate K",""SIG102=568,"MSSQL sp_OAGetErrorInfo K",""SIG103=569,"MSSQL sp_OAGetProperty K",""SIG104=570,"MSSQL sp_OAMethod K",""SIG105=571,"MSSQL sp_OASetProperty K",""SIG106=572,"MSSQL sp_OADestroy K",""SIG107=573,"MSSQL sp_OAStop K",""SIG108=574,"MSSQL sp_addextendedproc K",""SIG109=575,"MSSQL xp_makewebtask K",""SIG110=576,"MSSQL sp_addlogin K",""SIG111=577,"MSSQL xp_readerrorlog K",""SIG112=578,"MSSQL xp_regenumvalues K",""SIG113=579,"MSSQL xp_regread K",""SIG114=580,"MSSQL xp_regwrite K",""SIG115=581,"MSSQL xp_regdeletevalue K",""SIG116=582,"MSSQL xp_regaddmultistring K",""SIG117=583,"MSSQL xp_regremovemultistring K",""SIG118=584,"MSSQL xp_regdeletekey K",""SIG119=585,"MSSQL xp_servicecontrol K",""SIG120=586,"MSSQL xp_enumdsn K",""SIG121=587,"MSSQL xp_loginconfig K",""SIG122=588,"MSSQL xp_terminate_process K",""SIG123=589,"MSSQL xp_proxiedadata K",""SIG124=590,"MSSQL j1",""SIG125=591,"MSSQL raiserror %&",""SIG126=592,"MSSQL formatmessage %&",""SIG127=593,"MSSQL xp_sprintf %&",""SIG128=594,"MSSQL Web #d",""SIG129=595,"MSSQL sp_set_sqlagent_properties K",""SIG130=596,"MSSQL sp_addsrvrolemember K",""SIG131=597,"MSSQL sp_msdropretry K",""SIG132=598,"MSSQL DTS wK",""SIG133=599,"MSSQL Core Shielding - +",""SIG134=601,"MSSQL sp_MSget_publisher_rpc K",""SIG135=602,"MSSQL xp_fileexist K",""SIG136=603,"MSSQL xp_instance_regwrite K",""SIG137=604,"MSSQL xp_instance_regread K",""SIG138=605,"MSSQL xp_instance_regenumkeys K",""SIG139=606,"MSSQL xp_instance_regenumvalues K",""SIG140=607,"MSSQL xp_instance_regremovemultistring K",""SIG141=608,"MSSQL xp_instance_regaddmultistring K",""SIG142=609,"MSSQL xp_instance_regdeletevalue K",""SIG143=610,"MSSQL xp_instance_regdeletekey K",""SIG144=752,"Windows Explorer CLSID )*+%&",""SIG145=797,"o+ )*+,d",""SIG146=801,"UVC",""SIG147=803,"CD-ROM AutoRun >?@",""SIG148=804,"BackOffice + )*+,",""SIG149=812,")*+ $ ",""SIG150=814,"$ )*+",""SIG151=825,"BackOffice 2000 ",""SIG152=828,"NetBus +",""SIG153=829,"NetBus 9:",""SIG154=832,"D DI j)* =j)",""SIG155=834,"SAM ",""SIG156=835,"Repair ,",""SIG157=836,"SAM X)W )*+,",""SIG158=837,"Print Provider ",""SIG159=838,"Spoolhack.dll )*+12",""SIG160=840,"Wordpad +D )*+",""SIG161=841,"Winhlp32 j)* =j)",""SIG162=843,"NT4All K",""SIG163=844,"ImI",""SIG165=846,"Server Operator K",""SIG166=847,"Common User Startup Folder ",""SIG167=850,"%&'()*+",""SIG168=853,"IIS Code.asp )*+,",""SIG169=854,"IIS CodeBrws.asp )*+,",""SIG170=855,"IIS Index Server Webhits ",""SIG171=856,"IIS abc# Dos",""SIG172=857,"IIS d DSN )*+12",""SIG173=858,"IIS Showcode.asp )*+,dS",""SIG174=860,"IIS ShowFile )*+,dS",""SIG175=862,"IIS Jet Database XZ%&",""SIG176=863,"IIS ASP # $",""SIG177=866,"IIS FrontPage imagemap.exe DoS",""SIG178=869,"IIS catalog_type ASP D+ ",""SIG179=872,"IIS MiniVend view_page.html D+ ",""SIG180=873,"IIS ASP D+ advsearch.asp DoS",""SIG181=874,"IIS ASP D+ search.asp DoS",""SIG182=875,"IIS ASP D+ query.asp DoS",""SIG183=876,"IIS +.htr )*+ )I|0",""SIG184=877,"IIS FrontPage htimage.exe DoS",""SIG185=880,"IIS Sun Java HotSpot DoS ",""SIG186=885," j logon.scr",""SIG187=891,"j %&'()*+",""SIG188=892,"HKLM I ",""SIG189=893,"RAS PhoneBook j)* =j)",""SIG190=894,"RAS PhoneBook )*+",""SIG191=895,"Phone Dialer j)* =j)",""SIG192=896,"Dialer )*+",""SIG193=899,"Fpnwclnt.dll wxZ )+#",""SIG194=900,"p[\49:wxZ",""SIG195=901,"p[\49: Userid",""SIG196=902,"Wordpad DCOM j ",""SIG197=904,"+ 9:YZ",""SIG198=905,"+ 9:",""SIG199=906,"Microsoft ",""SIG200=907,"PWDump +9:",""SIG201=909,"Rdisk E;)*+,",""SIG202=910,"Uninstall ",""SIG203=911," )*+]6k)*+78",""SIG204=912," )*+]6k)*+t",""SIG205=913," K",""SIG206=914," )*+ w",""SIG207=915," - >?@",""SIG208=916,"= UV>?@",""SIG209=917,"=>?@",""SIG210=918,"SwxZ&o?@",""SIG211=919,"SwxZ&|"$",""SIG212=920,"Microsoft I ",""SIG213=922,"IIS Idq.dll Traversal",""SIG214=923,"IIS Ij+",""SIG215=924,"IIS Traversal qXZ%&",""SIG216=927,"WinVNC +",""SIG217=928,"WinVNC 9:",""SIG218=933,"x DoS ",""SIG219=935,"IIS JsBrwPop.asp ",""SIG220=936,"IIS IISHack 1.5 (IIS ASP $19.95 hack)",""SIG221=937,"IIS Executable File w",""SIG222=938,"IIS Phone Book j)* =j)",""SIG223=939,"IIS Perl Command %&",""SIG224=940,"IIS D",""SIG225=941,"IIS .htw D",""SIG226=942,"IIS .shtml D",""SIG227=943,"IIS FrontPage shtml.dll D",""SIG228=944,"~>?@",""SIG229=945,"jp4 SMB | o?@",""SIG231=947,"jp4 SMB | o?@",""SIG232=948,"Ip4 SMB | o?@",""SIG233=949,"Null W >?@",""SIG234=950,"Null W }.wD,",""SIG235=951,"Null W ~,",""SIG236=952,"MS-CHAPv2 DX+",""SIG237=953,"DX+",""SIG238=954,"= (Windows)",""SIG239=957,"RS",""SIG240=958,"Dr. Watson user.dmp rst",""SIG241=959,"Msgina p4",""SIG242=960,"Msgina.dll p4",""SIG243=961,"Autorun )*+12",""SIG244=962,"SNMP IDo?@",""SIG245=963,"SNMP ID>?@",""SIG246=964,"SNMP World-Writable ID",""SIG247=965,"SNMP World-Writable ab{~",""SIG248=966,"SNMP World-Writable X",""SIG249=967,"SNMP World-Writable [\]",""SIG250=968,"SNMP K",""SIG251=969,"",""SIG252=972,"j #f]",""SIG253=973,"TCP/IP ",""SIG254=974,"IP Z",""SIG255=975,"Remote Access Service ",""SIG256=976,"Remote Access Service 78",""SIG257=977,"Remote Access Service 9:",""SIG258=978,"+ ZImC$ )*+",""SIG259=980,"ODBC.ini )*+",""SIG260=982,"@[\]$ )*+abc",""SIG261=983,"Windows )*+ RegKey ",""SIG262=984,"Nimda x$+34569:",""SIG263=985,"dS%&",""SIG264=986,"Task Manager Drst",""SIG265=987," )*+]6k)*+",""SIG266=988,"RunAs 9:YZ",""SIG267=989,"RunAs 8",""SIG268=990,"GH9:)+ DI$12",""SIG269=992,"SMSS D",""SIG270=993,"$ ZIm%&'()*+",""SIG271=994,"Group Policy Object ,",""SIG272=999,"12",""SIG273=1000,"Windows Agent Shielding - ",""SIG274=1001,"Windows Agent Shielding - )*+",""SIG275=1002,"Windows Agent Shielding - ",""SIG276=1003,"Windows Agent Shielding - D ",""SIG277=1020,"Windows Agent Shielding - )*+ ",""SIG278=1023,"Windows McAfee Agent Shielding - ",""SIG279=1024,"Windows McAfee Agent Shielding - )*+",""SIG280=1025,"Windows McAfee Agent Shielding - ",""SIG281=1100,"IIS Site Server ViewCode.asp )*+,",""SIG282=1101,"IIS wxZ",""SIG283=1102,"IIS ism.dll Remote Administration ,",""SIG284=1103,"IIS Site Server AdSamples site.csc \",""SIG285=1104,"IIS Index Server D+ queryhit.htm",""SIG286=1105,"IIS bdir.htr EF",""SIG287=1106,"IIS details.idc Y XZ%?",""SIG288=1107,"IIS ctguestb.idc Y XZ%?",""SIG289=1108,"IIS Translate:f ",""SIG290=1109,"IIS Indexed ",""SIG291=1110,"IIS FrontPage abc shtml.exe j DoS",""SIG292=1112,"IIS WebDAV DoS",""SIG293=1113,"IIS WebDAV Propfind DoS",""SIG294=1114,"IIS cpshost.dll )*+DZ",""SIG295=1116,"IIS FrontPage Admin ,",""SIG296=1117,"IIS FrontPage .pwd )*+,'",""SIG297=1119,"IIS IPP .printer j)* =j)",""SIG298=1120,"IIS ` 16 l {XZ Ij+",""SIG299=1121,"IIS CodeRed / Index Server idq.dll j)* =j)",""SIG300=1122,"IIS FrontPage fp30reg.dll j)* =j)",""SIG301=1123,"IIS FrontPage dvwssr.dll j)* =j)",""SIG302=1124,"IIS Y XZ%&",""SIG303=1125,"IIS In-process K",""SIG304=1126,"IIS Index Server )*+qw",""SIG305=1127,"IIS %u (UTF) {XZ",""SIG306=1128,"IIS &/& ",""SIG307=1129,"IIS |Z",""SIG308=1130,"IIS D+ D",""SIG309=1131,"IIS )*+p4 Unicode",""SIG310=1132,"IIS Chunked Encoding D =j)",""SIG311=1133,"IIS COM ab",""SIG312=1134,"Dp}[\]"#$ j",""SIG313=1135,"=2 (Windows)",""SIG314=1136,"IIS WebDAV j)* =j)",""SIG315=1137,"Ntdll.dll j)* =j)",""SIG316=1138,"Nimda +34569: (riched20.dll)",""SIG317=1139,"svchost j)* =j) (RPC DCOM)",""SIG318=1140,"Windows D j)* =j)",""SIG319=1141,"Exchange Server j)* =j)",""SIG320=1142,"Windows Explorer j)* =j)",""SIG321=1143,"Windows Help Facility j)* =j)",""SIG322=1144,"Outlook Express j)* =j)",""SIG323=1145,"Windows Media Player j)* =j)",""SIG324=1146,"Internet Explorer j)* =j)",""SIG325=1147,"Windows Help q Support Center j)* =j)",""SIG326=1148,"Network Aware DWpq4 CMD +,",""SIG327=1149,"Windows |+ I3456 IE pq4 CMD +,",""SIG328=1150,"FTP Ipq4 CMD +,",""SIG329=1151,"Message Queue Service j)* =j)",""SIG330=1152,"d:wW+ ZImp4$ )*+",""SIG331=1153,"Windows Utility Mgr K",""SIG332=1154,"SSL-PCT j)* =j)",""SIG333=1156,"Windows Explorer dS%&",""SIG334=1157,"USB j[\]",""SIG335=1200,"IIS Shielding )*+,",""SIG336=1201,"IIS Shielding )*+",""SIG337=1202,"IIS Shielding - ",""SIG338=1204,"IIS Shielding - ",""SIG339=1205,"IIS {D - IIS Web UVpq4)*+,",""SIG340=1206,"IIS Shielding - $ )+p4)*+",""SIG341=1207,"IIS {D - IIS Dpq4)*+%&",""SIG343=1210,"IIS {D - IIS Dpq4",""SIG344=1211,"IIS Shielding - )*+",""SIG345=1212,"IIS Shielding - )*+,",""SIG346=1216,"IIS .printer )*+%&",""SIG347=1217,"IIS .HTR )*+%&",""SIG348=1218,"IIS SSI )*+ab",""SIG349=1219,"IIS Index Server )*+ab",""SIG350=1220,"IIS .IDC )*+ab",""SIG351=1221,"IIS Shielding - X)W)*+9:(ADMCOMConnect)",""SIG352=1222,"IIS dS",""SIG353=1223,"IIS {D - IIS Web UVpq4)*+",""SIG354=1224,"IIS {D - IIS Web UVpq4)*+%&",""SIG355=1225,"IIS {D - IIS Dpq4)*+,",""SIG356=1226,"IIS {D - IIS Dpq4)*+",""SIG357=1227,"IIS {D - IIS Web UVpq4",""SIG358=1229,"IIS {D - IIS Web UVpq4",""SIG359=1230,"IIS Shielding - X)W)*+9:",""SIG360=1240,"IIS Shielding FTP )*+,",""SIG361=1241,"IIS Shielding FTP )*+",""SIG362=1250,"IIS Shielding FTP )*+",""SIG363=1251,"IIS Shielding FTP )*+,",""SIG364=1253,"IIS Shielding FTP )*+%&",""SIG365=1254,"IIS Shielding FTP )*+12",""SIG366=1256,"IIS Shielding )*+%&",""SIG367=1260,"IIS6 {D - IIS Dpq4)*+,",""SIG368=1261,"IIS6 {D - IIS Web UVpq4)*+,",""SIG369=1262,"IIS6 {D - IIS Dpq4)*+%&",""SIG370=1263,"IIS6 {D - IIS Web UVpq4)*+%&",""SIG371=1264,"IIS6 {D - IIS Dpq4)*+",""SIG372=1265,"IIS6 {D - IIS Web UVpq4)*+",""SIG373=1266,"IIS6 {D - IIS Dpq4",""SIG374=1267,"IIS6 {D - IIS Web UVpq4",""SIG375=1268,"IIS6 {D - IIS Dpq4",""SIG376=1269,"IIS6 {D - IIS Web UVpq4",""SIG377=1280,"IIS6 Shielding )*+,",""SIG378=1281,"IIS6 Shielding )*+%&",""SIG379=1282,"IIS6 Shielding )*+",""SIG380=1283,"IIS6 Shielding$ )+p4)*+",""SIG381=1284,"IIS6 Shielding - )*+,",""SIG382=1285,"IIS6 Shielding - )*+",""SIG383=1286,"IIS6 Shielding - X)W)*+9:",""SIG384=1287,"IIS6 Shielding - X)W)*+9:(ADMCOMConnect)",""SIG385=1288,"IIS6 Shielding - ",""SIG386=1289,"IIS6 Shielding - ",""SIG387=1354,"Locator Service j)* =j)",""SIG388=2300,"Internet Explorer Hardening o?@",""SIG389=2400,"IIS6 Web Admin D ",""SIG390=2600,"IE {D - |+ )*+,",""SIG391=2601,"IE {D - XZ )*+,",""SIG392=2602,"IE {D - Office -)*+,",""SIG393=2603,"IE {D - Office -)*+,",""SIG394=2604,"IE {D - Crypto )*+,",""SIG395=2620,"IE {D - Windows %&'()*+",""SIG396=2621,"IE {D - S%&'()*+",""SIG397=2622,"IE {D - Explorer pq4)~+",""SIG398=2640,"IE {D - deSDI$%&",""SIG399=2641,"IE {D - Temp.Internet Files%&",""SIG400=2660,"IE {D - HTML DW%&",""SIG401=2661,"IE {D - deS%&'()*+",""SIG402=2662,"IE {D - Xw+[\] Help )*+%&",""SIG403=2663,"IE {D - NTVDM %&",""SIG404=2664,"IE {D - Windows Help %&",""SIG405=2720,"Outlook {D - Windows %&'()*+",""SIG406=2721,"Outlook {D - S%&'()*+",""SIG407=2722,"Outlook {D - S)*+12",""SIG408=2740,"Outlook {D - SDI$%&",""SIG409=2741,"Outlook {D - Temp.Internet Files%&",""SIG410=2760,"Outlook {D - HTML DW%&",""SIG411=2761,"Outlook {D - deS%&'()*+",""SIG412=2762,"Outlook {D - Xw+[\] Help )*+%&",""SIG413=2763,"Outlook {D - NTVDM %&",""SIG414=3700,"TCP n ",""SIG415=3701,"UDP n ",""SIG416=3702,"d0S[\4)*+ ",""SIG417=3718,"x>Dj (SMBdie)",""SIG418=3720,"MSSQL Resolution Service j)* =j) (Slammer)",""SIG419=3721,"RPC DCOM # j)* =j) (Blaster!Nachi)",""SIG420=3722,"RPC Service (WinNuke)",""SIG421=3723,"Windows PPTP Server j)* =j)",""SIG422=3724,"LSASS Dcpromo )*+ j)* =j)(Sasser)",""SIG423=3725,"IP =DW=j)",""SIG425=3727,"IE ZI Z ZDpq4)*++",""SIG426=3728,"MSRPC LLSSRV j)* =j)",""SIG427=3730,"Windows {DI MSHTA D%&",""SIG428=3731,"URL XZ D)rst",""SIG429=3732,"IE DHTM ActiveX X+ /Z| D",""SIG430=3733,"Windows Messenger Service j)* =j)",""SIG431=3734,"D DI j)* =j)",""SIG432=3735,"DI Z D j)* =j) (Zotob)",""SIG433=3736,"Telephony Service j)* =j)",""SIG434=3737,"COM =m~#@|Yrst",""SIG435=3738,"MSDTC RPC rst",""SIG436=3739,"Windows Plug-and-Play j)* =j)rst 2",""SIG437=3740,"~rstp4I ",""SIG438=3741,"Windows |#)*+ D =j)rst",""SIG439=3742,"Windows |#)*+ D =j)rst",""SIG440=3744,"Graphic Rendering Engine rst",""SIG441=3745,"Korean Input Method Editor rst",""SIG443=3747,"Microsoft Windows ACL KL.MNrst",""SIG444=3748,"MDAC XZ%&rst",""SIG445=3749,"Internet Explorer HTA %&rst",""SIG446=3750,"Desktop.ini pq4Y COM Wrst",""SIG447=3752,"MSDTC RPC DoS rst",""SIG449=3754,"winword.exe CdS1",""SIG452=3757,"MSHTA p Ij+rst",""SIG453=3758,"X+prst",""SIG454=3759,"MHTML prst",""SIG455=3760,"Internet Explorer p FTP XZrst",""SIG456=3761,"Winsock prst",""SIG457=3762,"IE SourceURL p NULL rst",""SIG458=3763,"Windows "+pKL.MNrst",""SIG459=3764,"services.exe pd%&rst",""SIG460=3765,"svchost.exe pd%&rst",""SIG462=3767,"Windows Server pj)* =j)rst (2)",""SIG463=3768,"Windows Server Service j)* =j)rst (@)",""SIG464=3769,"Windows |#)*+p DoS f4rst",""SIG465=3771,"Indexing Service XSS rst",""SIG466=3772,"Client Services for Netware BO rst",""SIG467=3773,"COM =m~ #@pq4|Yrst (daxctle.ocx)",""SIG468=3774,"Microsoft Internet Explorer Vector Markup Language rst (1)",""SIG469=3775,"WebViewFolderIcon p4 Windows Shell rst",""SIG470=3776,"Microsoft Internet Explorer Vector Markup Language rst (2)",""SIG471=3777,"Windows ASN.1 D =j)rst",""SIG472=3778,"Internet Explorer 7 Z jrst",""SIG473=3779,"Windows IE ADODB.Connection rst",""SIG474=3780,"dS DNS C DoS '(S IPNATHLP.DLL rst",""SIG475=3781,"DoS %&[\4 Netware ZIjrst",""SIG476=3782,"YXZ%&[\4 Workstation Service rst",""SIG477=3783,"YXZ%&[\4 Visual Studio 2005 rst",""SIG478=3784,"YXZ%&[\4 Microsoft Agent rst",""SIG479=3785,"Microsoft XML Core Service rst",""SIG480=3786,"YXZ%&[\4 Visual Studio 2005 rst (2)",""SIG482=3788,"COM =m~ #@pq4|Yrst (2)",""SIG483=3789,"Microsoft Step-by-Step Interactive Training rst",""SIG484=3790,"Windows ZXZrst",""SIG485=3791,"Microsoft Rich Edit q Microsoft MFC rst",""SIG486=3792,"YXZ%&[\4 Windows Media Player rst",""SIG487=3793,"YXZ%&[\4 Adobe Reader q Acrobat ActiveX X+SIG488=3797,"Microsoft Windows Message Queuing j)* =j)rst",""SIG489=3798,"YXZ%&[\4 Remote Installation Service rst",""SIG490=3799,"Windows Media Player ASX rst",""SIG491=3800,"YXZ%&[\4 Windows Media Player rst (2)",""SIG492=3801,"YXZ%&[\4 TCP/IP rst",""SIG493=3802,"YXZ%&[\4 Server Service rst",""SIG494=3803,"YXZ%&[\4 DNS rst",""SIG495=3804,"pS4 Server Service rst",""SIG496=3805,"Adobe Download Manager # =j)rst",""SIG497=3806,"FTP UV/wxZpq4=j)",""SIG498=3807,"Microsoft Outlook S(rst",""SIG499=3808,"Microsoft Outlook S(rst (2)",""SIG500=3809,"Microsoft Outlook VEVENT rst",""SIG501=3810,"Office 2003 mI+n++DI$rst",""SIG502=3811,"Adobe Reader DI XSS rst",""SIG503=3812,"Adobe Reader DI XSS rst (2)",""SIG504=3813,"Acer LunchApp.APlunch ActiveX X+rst",""SIG505=3814,"Microsoft Word {D - dS)*+12",""SIG506=3815,"Windows Image Acquisition Service rst",""SIG507=3816,"COM =m~ #@pq4|Yrst (4)",""SIG508=3817,"COM =m~ #@pq4|Yrst (3)",""SIG509=3818,"Microsoft XML Core Service rst (3)",""SIG510=3819,"HTML Help ActiveX X+rst",""SIG512=3821,"Microsoft Word (rst",""SIG513=3822,"Windows Shell rst",""SIG514=3823,"BackDoor-CPX +",""SIG515=3824,"Google Desktop p4 JavaScript rst",""SIG516=3825,"CAPICOM.DLL pdSLlC'(Srst",""SIG517=3826,"SupportSoft ActiveX X+p4lj)* =j)rsSIG518=3827,"Microsoft Content Management Service rst",""SIG519=3828,"Microsoft Content Management Service p4 XSS rst",""SIG520=3829,"Windows(pjZrst",""SIG521=3830,"Internet Explorer 7 ''navcancl'' p4Z jrst",""SIG522=3831,"Windows IE ADODB.Recordset rst",""SIG523=3832,"EMF rst",""SIG524=3833,"Research in Motion ActiveX X+prst",""SIG525=3834,"mdsauth ActiveX X+prst",""SIG526=3835,"COM =m~ #@pq4|Yrst (5)",""SIG527=3836,"dSwI|#Cf4 GDI rst",""SIG528=3837,") I#IVrst",""SIG529=3838,"YXZ%&[\4 GDI rst",""SIG530=3839,"Microsoft Agent URL p4rst",""SIG531=3840,"Windows DNS Server RPC pYXZ%&[\4rst",""SIG532=3841,"Akamai Download Manager ActiveX p4# j)* =j)rSIG534=3844,"Microsoft Exchange p DoS f4rst",""SIG535=3845,"YXZ%&[\4 Universal Plug and Play (UPnP) Service rst","SIG536=3846,"YXZ%&[\4 FTP rst",""SIG537=3847,"Win32 API pY'(SXZ%&rst",""SIG538=3848,"Speech Control p|Yrst",""SIG539=3849,"Internet Explorer MHTML Protocol Handler p URL rst",""SIG540=3850,"IE q OE p Z| [\4rst",""SIG541=3851,"MHTML Prefix prst",""SIG542=3852,"ASP.NET p NULL jC'(Srst",""SIG543=3853,"IE/Firefox pXZrst",""SIG544=3854,"Sun Java WebStart JNLP p# =j)rst",""SIG545=3855,"Firefox pdS URL rst",""SIG546=3858,"YXZ%&[\4 OLE Automation rst",""SIG547=3859,"Microsoft Virtual PC j)* =j)",""SIG548=3860,"YXZ%&[\4 TypeLibInfo ActiveX X+rst",""SIG549=3861,"YXZ%&[\4 Windows Media Player rst",""SIG550=3862,"pdwizard.ocx |Yrst",""SIG551=3864,"Microsoft Agent rst",""SIG552=3865,"Windows UNIX Services pKrst",""SIG553=3866,"Apple QuickTime ''qtnext'' tpYXZ%&'(Srst",""SIG554=3867,"YXZ%&[\4 Kodak Preview rst",""SIG555=3868,"YXZ%&[\4 ShellExecute rst",""SIG556=3869,"YXZ%&[\4 RealPlayer ActiveX X+rst",""SIG557=3870,"VMWare Workstation Shielding - ",""SIG558=3871,"VMWare Workstation Shielding - ",""SIG559=3872,"VMWare Workstation Shielding - )*+",""SIG560=3873,"VMWare Server Shielding - ",""SIG561=3874,"VMWare Server Shielding - ",""SIG562=3875,"VMWare Server Shielding - )*+",""SIG563=3876,"YXZ%&[\4 Macrovision FLEXnet ActiveX X+rst",SIG565=3879,"VMware Workstation Core Envelope )*+",""SIG566=3882,"VMware Workstation Core Envelope ",""SIG567=3883," {#q# o?@fJK4",""SIG568=3884," UVKnfJK4",""SIG569=3885," Y%&)*+q)*+12//78fJSIG570=3886," YAutorun )*+12fJK4",""SIG571=3887," .EXE ]6%&)*+abcfJK4",""SIG572=3888," Windows DSfJK4",""SIG573=3889," tftp.exe fJK4",""SIG574=3890," Internet Explorer pqf4",""SIG575=3891," CLSID!APPID q TYPELIB +fJK4",""SIG576=3893," E;)+CD%&fJK4",""SIG577=3894," Windows %&)*+f%&4 svchost fJK4",""SIG578=3895," wxZqc|+ ZZ)*+fSIG579=3896," abcfJK4",""SIG580=3897," wxZqc|+ Z0)*+SIG581=3898," McAfee )*+qfJK4",""SIG582=3899," McAfee Common Management Agent )*+qfJKSIG583=3900," McAfee Scan Engine )*+qfJK4",""SIG584=3901," Mozilla q FireFox )*+qf4",""SIG585=3902," Internet Explorer f4",""SIG586=3903," Browser Helper Object q~+ {W+SIG587=3904," xf4",""SIG588=3905," E;)+DI$)*+%&fJK4","SIG589=3906," Autorun )*+,DI$fJK4",""SIG590=3907," DI$fJK4",""SIG591=3908," Windows )+CGH%&)*+12fJK4",""SIG592=3909," Program Files )+CGH%&)*+12fJK4",""SIG593=3910," Downloaded Program Files )+)*+9:fJK4",SIG594=3911,"YXZ%&[\4 HP Virtual Rooms ActiveX X+rst",""SIG595=3912,"YXZ%&[\4 Microsoft Office Web Components ActiveX XSIG596=3913,"YXZ%&[\4 Microsoft Word rst",""SIG597=3915,"IE dxtmsft.dll LllpYXZ%&[\4rst",""SIG598=3916,"YXZ%&[\4 Visual Studio 6 rst",""SIG599=3917,"Windows )*+>12",""SIG600=3918,"Outlook mailto URI rst",""SIG601=3919,"VMware Server Core Envelope )*+",""SIG602=3920,"VMware Server Core Envelope ",""SIG603=3921,"MS Word Mail Merge (rst",""SIG604=3922,"Microsoft Excel CdS1",""SIG605=3923,"YXZ%&[\4 Microsoft HxVz ActiveX X+rst",""SIG606=3924,"YXZ%&[\4 Windows GDI32 rst",""SIG607=3925,"VMware VMX CD",""SIG608=3926,"IBM Lotus Expeditor cai: URI rst",""SIG610=3928,"Safari D Zrst",""SIG611=3929,"Microsoft Xn ActiveX =m~|Yrst",""SIG612=3930,"BackWeb ActiveX X+rst6!Y XZ%&f4'(t34SIG613=3931,"Creative Software AutoUpdate Engine ActiveX # j)* =j)SIG614=3933,"Snapshot Viewer for Microsoft Access ActiveX X+rst6!Y SIG615=3934,"Aurigma Image Uploader ActiveX X+rst6!Y XZ%&fSIG616=3935,"HP # n ActiveX X+rst6!Y XZ%&fSIG617=3937,"Microsoft Office WPG Image Converter Filter rst6!Y XZ%&fSIG618=3938,"Microsoft Office PICT Image Converter Filter rst6!Y XZ%&fSIG619=3939,"Microsoft Windows Image Color Management System rst6!Y XZ%&fSIG620=3941,"Microsoft Visual Studio Msmask32 ActiveX X+6Y XZ%&fSIG621=3945,"Adobe Flash DZrst",""SIG622=3946,"Microsoft Windows Media Encoder 9 6Y XZ%&f4'(t34",""SIG623=3947,"OneNote URI {Irst",""SIG624=3948,"Windows Metafile Y XZ%&rst",""SIG625=3952,"Novell iPrint Client ActiveX X+# j)* =j)rsSIG626=3953,"RealNetworks RealPlayer Rmoc3260.dll ActiveX X+|Yrst",""SIG627=3954,"ComponentOne VSFlexGrid v. 7/8 ActiveX X+ ''Archive()'' |ZSIG628=3956,"VMWare COM API Y j)* =j)rst",""SIG629=3957,"Microsoft KB956391 ActiveX Kill Bits GDI$",""SIG630=3958,"Message Queuing rst6!Y XZ%&f4'(t34",""SIG631=3959,"YXZ%&[\4 Host Integration Server rst",""SIG632=3960,"CDO DX+ ZIrst6!f4'(t34",""SIG633=3961,"YXZ%&[\4 Server Service rst",""SIG634=3965,"Adobe Acrobat util.printf pj)* =j)rst",""SIG635=2201,"Windows rst6!Y XZ%&f4'(t34 (CVE-2008-4269)SIG636=2202,"GDI rst6!Y XZ%&f4'(t34 (CVE-2008-2249)",""SIG637=2200,"Vulnerability in Microsoft Office Sharepoint Server rst6!fSIG638=2204,"IE Navigate ActiveX X+rst6!Y XZ%&f4'(SIG639=2207,"WMP rst6!WMS pq4f4'(t34",""SIG640=2205,"CVE-2008-4255 Microsoft Windows Common AVI X+rst",""SIG641=2206,"CVE-2008-4256 Microsoft Charts Control rst",""SIG642=2208,"Internet Explorer rst6!Y XZ%&f4'(t34 (CVE-2008SIG643=2210,"Microsoft SQL Server sp_replwritetovarbin CZ Dpq4j)* SIG644=2211,"Visual Studio 2005 rst6!Y XZ%&f4'(t34 (3)",""SIG645=2212,"YXZ%&[\4 Windows Win32k "+rst",""SIG646=2213,"Microsoft Exchange EMSMDB32 rst6!f4'(t34",""SIG647=2214,"Akamai Download Manager rst6!Y XZ%&f4'(t34",""SIG648=2215,"Motion (RIM) AxLoader rst6!Y XZ%&f4'(t34",""SIG649=2216,"Visual Basic 6.0 I#$ab)*+ (ActiveX X+) rst6!YSIG650=2219,"Internet Information Services 5.0 prst",""SIG651=2220,"Internet Information Services 5.1 q 6.0 prst",""SIG652=2217,"YXZ%&[\4 Microsoft Office PowerPoint rst",""SIG653=2218,"Autorun )*+0m[\]",""SIG654=2222,"Print Spooler pImI0/0rst",""SIG655=2223,"Microsoft KB969898 Update Rollup for ActiveX Kill Bits",""SIG656=2221,"Embedded OpenType ) {rstpq!YXZ%&[\SIG658=6003," SQL - I",""SIG659=6004," SQL - II",""SIG660=6005," SQL - III",""SIG661=6006," SQL - IV",""SIG662=6007," SQL - V",""SIG663=6008," SQL - VI",""SIG664=6010,"EiRSDW)",""SIG665=6011,"EiRSDW9:",""SIG666=2225,"YXZ%&[\4 Office Web Xnrst",""SIG667=2226,"Microsoft Office Publisher rstpq!YXZ%&[\4",""SIG668=2227,"YXZ%&[\4 Microsoft Video ActiveX X+rst",""SIG669=2228,"xW L.MNrst",""SIG670=2229,"YXZ%&[\4 Remote Desktop Irst",""SIG671=2230,"# )I|]6=jID )I|rst",""SIG672=2231,"YXZ%&[\4 SMB rst",""SIG673=2232,"SMB j)* =j) Y XZ%&rst",""SIG674=2233,"SMB Y XZ%&rst",""SIG675=2234,"YXZ%&[\4 DHTML Xn ActiveX X+SIG676=2235,"YXZ%&[\4 Windows Media Player rst",""SIG677=2236,"Internet Explorer pq4deS ActiveX X+#@ (2009 10 SIG678=2237,"YXZ%&[\4 rst",""SIG679=2238,"Symantec Altiris Deployment Solution ActiveX pYXZ%&[\4rsSIG680=2239,"I jpYXZ%&frst",""SIG681=2240,"Windows |#)*+p DoS f4rst (2)",""SIG682=2241,"Apache (ePO) Shielding - )*+,",""SIG683=2242,"Apache (ePO) Shielding - )*+",""SIG684=2243,"Apache (ePO) Shielding - apache $ )+p4)*+",""SIG685=2244,"Apache (ePO) +Z - )*+ Conf.Folder",""SIG686=2245,"Apache (ePO) +Z - )*+ Conf.Folder",""SIG687=2246,"xZwZq Office Xj#YCXZ%&[\4rstSIG688=2247,"NTVDM %&_",""SIG689=6012,"deSkl9: - API p4",""SIG690=6013,"deSkl9: - CALL hS5",""SIG691=6014,"deSkl9: - Z0\S5",""SIG692=6015,"deSkl9: - ZdE",""SIG693=2254,"deS9: - Acrobat Reader",""SIG694=2251,"Windows Shell ZIpYXZ%&[\4rst",""SIG695=2252,"Microsoft KB978262 - ActiveX Kill Bit `SGDI$",""SIG696=2256,"deS9: - Foxit Reader",""SIG697=2258,"Microsoft Office SharePoint Server 2007 p XSS rst",""SIG698=2259,"Microsoft Office Sharepoint +D rst",""SIG699=6024,"AB[\54AY IP Zm",""SIG700=6029,"SMB j)* )rst",""SIG701=6031,"SMB w=j)rst",""SIG702=2260,"YXZ%&[\4 Microsoft Data Analyzer ActiveX X+rsSIG703=2261,"Microsoft Internet Explorer 8 Developer Tools rst6!Y XZ%&fSIG704=2262,"Microsoft Internet Explorer 8 @|Yrst",""SIG705=2264," SQL - ",""SIG706=2265,")*+78",""SIG707=2266,"Access ActiveX X+rst",""SIG708=2267,"ACCWIZ.dll @[\5S5lrst",""SIG709=2263,"deS HelpCtr.exe 9: - Internet Explorer",""SIG710=2268,"Microsoft XML Core Service ActiveX X+rst",""SIG711=2269,"Microsoft Silverlight ActiveX X+rst",""SIG712=2271,"YXZ%&[\4 Cinepak Codec rst",""SIG713=6028,"Windows Shell ZI URL pYXZ%&[\4rst",""SIG714=6034,"IE createTextRange rst",""SIG715=2272,"DI fq40[\]",""SIG716=2273,"prst",""SIG717=2279,"YXZ%&[\4 CGM | Xj#rst",""SIG718=2281,"YXZ%&[\4 FlashPix I) )+#rst",""SIG719=6035,"UAG pq4)'(t",""SIG720=6036,"Forefront Unified Access Gateway UAG Yj+ n#+ Web rst",""SIG721=6037,"Sginurl.asp Drst",""