#
#        Malware Patrol - Block List - http://www.malwarepatrol.net
#	List for FireKeeper
#	Generated at: 20100906193756 UTC
#
#	Please do not update this list more often then every hour.
#
#	Copyright (c)  2010 - Andre Correa - Malware Patrol - Block List
#	This information is provided as-is and under the Terms
#	and Conditions available in the following address:
#
#	http://www.malwarepatrol.net/terms.shtml
#
#	Using this information indicates you agree to be 
#	bound by these term. If you do not accept these term, 
#	please do not use this information.
#
#


alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"ftp://ftp.gratisweb.com"; reference:url,www.malwarepatrol.net; fid:33600; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://08053.80uoxp.com/3cd2be"; reference:url,www.malwarepatrol.net; fid:156543; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://08o53.80uoxp.com/3cd2be"; reference:url,www.malwarepatrol.net; fid:156551; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://110.45.143.250/infotab"; reference:url,www.malwarepatrol.net; fid:155072; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://1111118.com/18x9"; reference:url,www.malwarepatrol.net; fid:147800; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://113.11.194.167/us27"; reference:url,www.malwarepatrol.net; fid:158770; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://113.11.194.174/uko"; reference:url,www.malwarepatrol.net; fid:149867; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://113.11.194.174/upd"; reference:url,www.malwarepatrol.net; fid:150196; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://113.11.194.174/upd/upd2"; reference:url,www.malwarepatrol.net; fid:153112; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://113.11.194.175/uk2070"; reference:url,www.malwarepatrol.net; fid:157172; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://114.207.112.169/ShoppingMatch/YJ"; reference:url,www.malwarepatrol.net; fid:146843; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://114.207.112.169/Xss"; reference:url,www.malwarepatrol.net; fid:146587; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://114.207.112.169/basic/btss"; reference:url,www.malwarepatrol.net; fid:153507; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://115.238.29.195/qd.netkill.com.cn"; reference:url,www.malwarepatrol.net; fid:156558; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://115.94.11.20"; reference:url,www.malwarepatrol.net; fid:155356; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://116.125.127.169"; reference:url,www.malwarepatrol.net; fid:150865; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://116.127.121.27/~brownsoftdown/download"; reference:url,www.malwarepatrol.net; fid:136317; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://117.41.164.131/dnf"; reference:url,www.malwarepatrol.net; fid:147935; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://12.10.157.6"; reference:url,www.malwarepatrol.net; fid:102027; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://121.10.172.121"; reference:url,www.malwarepatrol.net; fid:159460; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://121.11.150.90"; reference:url,www.malwarepatrol.net; fid:158617; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://121.12.109.75"; reference:url,www.malwarepatrol.net; fid:158807; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://121.12.110.35/Down/ext"; reference:url,www.malwarepatrol.net; fid:154385; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://121.12.110.35/Down/ext2"; reference:url,www.malwarepatrol.net; fid:154388; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://121.14.213.178"; reference:url,www.malwarepatrol.net; fid:141358; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://121.61.118.205/4"; reference:url,www.malwarepatrol.net; fid:150168; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://121.61.118.205/soft"; reference:url,www.malwarepatrol.net; fid:150183; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://121.78.129.68/iprivacy"; reference:url,www.malwarepatrol.net; fid:144757; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://122.224.186.252/qd.netkill.com.cn"; reference:url,www.malwarepatrol.net; fid:147940; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://122.227.16.187/count/js/update"; reference:url,www.malwarepatrol.net; fid:127713; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://124.237.77.242"; reference:url,www.malwarepatrol.net; fid:159133; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://174.123.210.242/~lovescon/Leila"; reference:url,www.malwarepatrol.net; fid:157634; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://178.162.182.141"; reference:url,www.malwarepatrol.net; fid:159463; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://188.40.163.73"; reference:url,www.malwarepatrol.net; fid:151215; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://188.65.74.165"; reference:url,www.malwarepatrol.net; fid:153508; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://188.95.159.40/qewtsp82"; reference:url,www.malwarepatrol.net; fid:158003; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://193.104.146.41"; reference:url,www.malwarepatrol.net; fid:158597; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://193.104.146.42"; reference:url,www.malwarepatrol.net; fid:158596; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://193.104.186.88"; reference:url,www.malwarepatrol.net; fid:159468; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://193.105.174.53/DE"; reference:url,www.malwarepatrol.net; fid:153624; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://195.122.151.71/files/292591929"; reference:url,www.malwarepatrol.net; fid:122197; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://195.182.57.143/.ph/4"; reference:url,www.malwarepatrol.net; fid:158613; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://195.182.57.143/.ph/5"; reference:url,www.malwarepatrol.net; fid:158612; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://199.237.249.173/img"; reference:url,www.malwarepatrol.net; fid:126184; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://1qzf.net"; reference:url,www.malwarepatrol.net; fid:158698; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://200.14.206.13/linuxsuse//components/com_extcalendar"; reference:url,www.malwarepatrol.net; fid:155572; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://200.192.131.43/~soccer/img"; reference:url,www.malwarepatrol.net; fid:155380; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://200.56.243.137/includes/phpbb/bin"; reference:url,www.malwarepatrol.net; fid:156932; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://200.58.113.213/webapps/ROOT"; reference:url,www.malwarepatrol.net; fid:92810; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://201.116.23.163/~rrojas"; reference:url,www.malwarepatrol.net; fid:158620; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://202.109.143.16"; reference:url,www.malwarepatrol.net; fid:154721; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://204.12.216.50/files/2108"; reference:url,www.malwarepatrol.net; fid:159357; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://204.12.226.234/upck32"; reference:url,www.malwarepatrol.net; fid:150593; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://204.188.243.119/Lzg"; reference:url,www.malwarepatrol.net; fid:159474; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://204.45.75.122/ko"; reference:url,www.malwarepatrol.net; fid:154402; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://204.93.172.42"; reference:url,www.malwarepatrol.net; fid:143433; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://205.234.161.140/suspended.page"; reference:url,www.malwarepatrol.net; fid:148855; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://205.234.184.45/suspended.page"; reference:url,www.malwarepatrol.net; fid:150812; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://205.234.231.142"; reference:url,www.malwarepatrol.net; fid:150629; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://206.217.209.10/ad"; reference:url,www.malwarepatrol.net; fid:145751; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://206.217.209.6"; reference:url,www.malwarepatrol.net; fid:145569; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://208.53.183.171"; reference:url,www.malwarepatrol.net; fid:158974; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://208.87.243.114/~winhq/i"; reference:url,www.malwarepatrol.net; fid:155258; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://208.96.234.100/images"; reference:url,www.malwarepatrol.net; fid:152962; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://211.155.31.235/dls"; reference:url,www.malwarepatrol.net; fid:149688; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://211.157.110.187"; reference:url,www.malwarepatrol.net; fid:140168; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://211.179.234.210/design07/user/user/freeboard"; reference:url,www.malwarepatrol.net; fid:127500; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://212.36.65.78/~natalia"; reference:url,www.malwarepatrol.net; fid:157344; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://212.63.132.215/images"; reference:url,www.malwarepatrol.net; fid:118275; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://213.155.12.144"; reference:url,www.malwarepatrol.net; fid:151931; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://216.147.35.69/images"; reference:url,www.malwarepatrol.net; fid:158814; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://216.246.35.171"; reference:url,www.malwarepatrol.net; fid:137889; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://217.116.46.139/logs/old"; reference:url,www.malwarepatrol.net; fid:125063; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://218.145.69.108/loveenjoyApp/ALARM"; reference:url,www.malwarepatrol.net; fid:138554; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://218.61.18.51"; reference:url,www.malwarepatrol.net; fid:147814; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://219.146.128.242/download/other_soft"; reference:url,www.malwarepatrol.net; fid:120765; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://219.146.128.242/sc"; reference:url,www.malwarepatrol.net; fid:122212; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://219.146.128.245/download/other_soft"; reference:url,www.malwarepatrol.net; fid:121058; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://219.146.128.245/sc"; reference:url,www.malwarepatrol.net; fid:122978; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://220.90.213.158/Comcat"; reference:url,www.malwarepatrol.net; fid:147363; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://220.90.213.158/SpyOutUpt"; reference:url,www.malwarepatrol.net; fid:153513; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://220.95.232.28/MyLibrary/Update"; reference:url,www.malwarepatrol.net; fid:121781; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://222.217.240.30/soft"; reference:url,www.malwarepatrol.net; fid:158975; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://293da.client-get-data.com/update"; reference:url,www.malwarepatrol.net; fid:140409; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://2duaminh.tv/files"; reference:url,www.malwarepatrol.net; fid:156888; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://34393.cn"; reference:url,www.malwarepatrol.net; fid:157057; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://35.duote.org"; reference:url,www.malwarepatrol.net; fid:143825; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://360avp.gicp.net"; reference:url,www.malwarepatrol.net; fid:157641; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://38.103.148.39/dc/payload"; reference:url,www.malwarepatrol.net; fid:146052; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://38.108.190.69/dd/sarbakan_inc/15m_d/t_25su"; reference:url,www.malwarepatrol.net; fid:124245; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://38.duote.org"; reference:url,www.malwarepatrol.net; fid:146615; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://3s.8i9i.com/download/other_soft"; reference:url,www.malwarepatrol.net; fid:120761; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://458928409.com"; reference:url,www.malwarepatrol.net; fid:159303; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://520mmxx.com/x"; reference:url,www.malwarepatrol.net; fid:157642; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://58.214.6.66/Help"; reference:url,www.malwarepatrol.net; fid:157242; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://58.215.109.38/qd.netkill.com.cn"; reference:url,www.malwarepatrol.net; fid:154313; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://58.215.109.39/qd.netkill.com.cn"; reference:url,www.malwarepatrol.net; fid:147364; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://60.18.146.138/qd.netkill.com.cn"; reference:url,www.malwarepatrol.net; fid:152767; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://60.191.41.34/qd.netkill.com.cn"; reference:url,www.malwarepatrol.net; fid:155127; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://60.217.234.138/dmcap"; reference:url,www.malwarepatrol.net; fid:157645; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://61.108.173.3/config/temp/.dc"; reference:url,www.malwarepatrol.net; fid:115889; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://61.135.130.127/7"; reference:url,www.malwarepatrol.net; fid:138984; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://61.135.130.127/8"; reference:url,www.malwarepatrol.net; fid:120764; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://61.147.120.135"; reference:url,www.malwarepatrol.net; fid:154728; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://61.30.87.71/img/98micejob"; reference:url,www.malwarepatrol.net; fid:123434; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://64.32.17.195"; reference:url,www.malwarepatrol.net; fid:148155; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://65.111.174.78/files/articles/News/a"; reference:url,www.malwarepatrol.net; fid:148643; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://65.36.242.6/~eres"; reference:url,www.malwarepatrol.net; fid:147366; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://66.116.229.233/include/inc_ext/spaw/class"; reference:url,www.malwarepatrol.net; fid:122231; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://66.152.93.119/ist/softwares/addins"; reference:url,www.malwarepatrol.net; fid:57151; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://66.152.93.119/ist/softwares/istupdates"; reference:url,www.malwarepatrol.net; fid:57152; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://66.197.69.159/images"; reference:url,www.malwarepatrol.net; fid:150810; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://66.220.17.157"; reference:url,www.malwarepatrol.net; fid:62039; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://66.220.17.200/bins"; reference:url,www.malwarepatrol.net; fid:125353; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://66.225.241.182/suspended.page"; reference:url,www.malwarepatrol.net; fid:151303; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://66.45.235.228"; reference:url,www.malwarepatrol.net; fid:17587; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://66.90.101.27"; reference:url,www.malwarepatrol.net; fid:159483; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://67.43.224.77"; reference:url,www.malwarepatrol.net; fid:95801; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://69.172.204.115/f3"; reference:url,www.malwarepatrol.net; fid:152772; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://69.172.204.120/f3"; reference:url,www.malwarepatrol.net; fid:143597; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://69.50.197.115/nepm"; reference:url,www.malwarepatrol.net; fid:157935; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://69.8.131.68"; reference:url,www.malwarepatrol.net; fid:146350; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://72.11.128.115/..."; reference:url,www.malwarepatrol.net; fid:149020; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://72.167.42.103/updates"; reference:url,www.malwarepatrol.net; fid:152904; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://72.18.206.103/nervoso"; reference:url,www.malwarepatrol.net; fid:151316; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://74.63.78.56"; reference:url,www.malwarepatrol.net; fid:158983; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://77.245.61.232/ads.innbanner.com/multi"; reference:url,www.malwarepatrol.net; fid:146687; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://77.245.61.232/banneradsgalore/multi"; reference:url,www.malwarepatrol.net; fid:142327; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://77.245.61.232/innbanner2/multi"; reference:url,www.malwarepatrol.net; fid:129506; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://77.78.240.89/xx1"; reference:url,www.malwarepatrol.net; fid:157564; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://77.92.158.122/webmail/inc/web/include"; reference:url,www.malwarepatrol.net; fid:108091; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://77qiqi.cn"; reference:url,www.malwarepatrol.net; fid:158534; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://78.140.15.82"; reference:url,www.malwarepatrol.net; fid:142211; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://80.74.139.159/suedfrankreich07/gallery"; reference:url,www.malwarepatrol.net; fid:156856; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://82.80.99.154/images"; reference:url,www.malwarepatrol.net; fid:155399; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://83.139.194.168/images"; reference:url,www.malwarepatrol.net; fid:139367; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://83.245.62.87"; reference:url,www.malwarepatrol.net; fid:103677; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://84b3a.63810.com/update"; reference:url,www.malwarepatrol.net; fid:155593; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://85.25.81.140/memberdateien/members/xblog20072"; reference:url,www.malwarepatrol.net; fid:73936; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://85.92.157.141/ads.milehighads/multi"; reference:url,www.malwarepatrol.net; fid:142328; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://85.92.157.141/bun/smb/bundles"; reference:url,www.malwarepatrol.net; fid:114584; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://86.55.211.116"; reference:url,www.malwarepatrol.net; fid:157597; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://86.55.211.117"; reference:url,www.malwarepatrol.net; fid:157600; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://89.149.223.229/dm/files"; reference:url,www.malwarepatrol.net; fid:147373; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://91.121.42.88"; reference:url,www.malwarepatrol.net; fid:158539; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://91.188.59.10"; reference:url,www.malwarepatrol.net; fid:145060; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://91.188.59.143/1"; reference:url,www.malwarepatrol.net; fid:159491; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://91.211.117.25/spy/bin"; reference:url,www.malwarepatrol.net; fid:157654; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://91.211.117.76"; reference:url,www.malwarepatrol.net; fid:159492; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://92.60.177.241"; reference:url,www.malwarepatrol.net; fid:157060; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://92.60.177.241/21"; reference:url,www.malwarepatrol.net; fid:157294; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://93.174.94.87/~denirulz/banned"; reference:url,www.malwarepatrol.net; fid:158819; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://93.174.94.92/~denirulz/img"; reference:url,www.malwarepatrol.net; fid:159364; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://93.174.94.92/~denirulz/oc"; reference:url,www.malwarepatrol.net; fid:158987; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://a1964.g.akamai.net/f/1964/2730/4h/www.whenu.com"; reference:url,www.malwarepatrol.net; fid:89613; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://a8d64.3bc6ad2ed.com/3cd2be"; reference:url,www.malwarepatrol.net; fid:156208; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://abbonamenti.e-duesse.it/images/watch"; reference:url,www.malwarepatrol.net; fid:150807; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://abnehmen-uebergewicht.de/cache"; reference:url,www.malwarepatrol.net; fid:154463; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://abnehmen-uebergewicht.de/templates/images"; reference:url,www.malwarepatrol.net; fid:154464; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://abrir1.newmail.ru"; reference:url,www.malwarepatrol.net; fid:148386; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://absi2008.netfirms.com"; reference:url,www.malwarepatrol.net; fid:91325; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://accounting-ebook.com/images1"; reference:url,www.malwarepatrol.net; fid:159365; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://acripino7878.110mb.com"; reference:url,www.malwarepatrol.net; fid:110885; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ad.51595.com/come/taoke"; reference:url,www.malwarepatrol.net; fid:142331; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ad.ghura.pl"; reference:url,www.malwarepatrol.net; fid:150180; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ad.idcgogo.10dig.net"; reference:url,www.malwarepatrol.net; fid:159367; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ad4you.fr/www/admin"; reference:url,www.malwarepatrol.net; fid:156986; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://admin.51pmj.net/55555"; reference:url,www.malwarepatrol.net; fid:153521; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://adv.businessmaster.in"; reference:url,www.malwarepatrol.net; fid:145614; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://aha-autoimage.com/photogallery/photo23924"; reference:url,www.malwarepatrol.net; fid:114195; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://aibiwang.com/images/uploads/edm"; reference:url,www.malwarepatrol.net; fid:159494; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://airsoapsupplies.com//images"; reference:url,www.malwarepatrol.net; fid:144191; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ajj.xianning.gov.cn/Imagens"; reference:url,www.malwarepatrol.net; fid:146526; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ak.exe.imgfarm.com/images/nocache/mindspark/2.3.69.6"; reference:url,www.malwarepatrol.net; fid:149897; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ak.exe.imgfarm.com/images/nocache/mindspark/2.3.69.8"; reference:url,www.malwarepatrol.net; fid:155259; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ak2o.info/c1"; reference:url,www.malwarepatrol.net; fid:157028; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://albaheart.net"; reference:url,www.malwarepatrol.net; fid:155606; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://album.paginas.sapo.pt"; reference:url,www.malwarepatrol.net; fid:93165; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://almskon.100free.com"; reference:url,www.malwarepatrol.net; fid:137754; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://alotibi1.100free.com"; reference:url,www.malwarepatrol.net; fid:158715; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://amaintl.com/images/_notes"; reference:url,www.malwarepatrol.net; fid:150941; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://antivirus-live.com"; reference:url,www.malwarepatrol.net; fid:123726; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://antiviruspc-update.com"; reference:url,www.malwarepatrol.net; fid:131573; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://anyhub.net/file"; reference:url,www.malwarepatrol.net; fid:159496; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://app.joyinfo.co.kr/file/comm"; reference:url,www.malwarepatrol.net; fid:150426; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://app.zerodoctor.com/main"; reference:url,www.malwarepatrol.net; fid:136051; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://appline.ieguide.co.kr/e1guide/lineguide"; reference:url,www.malwarepatrol.net; fid:138011; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://appline.ieguide.co.kr/e1guide/popguide"; reference:url,www.malwarepatrol.net; fid:137403; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://arathas.de/img/filme"; reference:url,www.malwarepatrol.net; fid:92692; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://artdeli.co.kr/bbs/include"; reference:url,www.malwarepatrol.net; fid:56305; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://askyap.net"; reference:url,www.malwarepatrol.net; fid:136565; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://assadral.cn/y/32"; reference:url,www.malwarepatrol.net; fid:153522; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://atlas.snet.gob.sv/documentos/tsunamis"; reference:url,www.malwarepatrol.net; fid:159198; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://autoprocrack.110mb.com"; reference:url,www.malwarepatrol.net; fid:129658; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://azb.strony.tx.pl"; reference:url,www.malwarepatrol.net; fid:149926; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://badukr.kr/iton"; reference:url,www.malwarepatrol.net; fid:154337; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://baidu.uicp.net"; reference:url,www.malwarepatrol.net; fid:159497; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://baidubb1.vip137.2hezu.net/dy/wanm"; reference:url,www.malwarepatrol.net; fid:142658; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://bawtsfkincool.fileave.com"; reference:url,www.malwarepatrol.net; fid:153691; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://bcfpb.com/webcal/tools/pp/.proxy/admin"; reference:url,www.malwarepatrol.net; fid:87762; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://bedayton.com"; reference:url,www.malwarepatrol.net; fid:143390; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://bestharshi.googlepages.com"; reference:url,www.malwarepatrol.net; fid:127321; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://bestkaksosat.info"; reference:url,www.malwarepatrol.net; fid:159370; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://bf.hy362.com/js"; reference:url,www.malwarepatrol.net; fid:156612; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://bingoso.net/ggg"; reference:url,www.malwarepatrol.net; fid:159500; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://blocomolhado.com.br/atual"; reference:url,www.malwarepatrol.net; fid:153030; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://blogaofotos8.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:95026; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://blogfotos2008.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:101040; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://blogpesoalpessoal.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:107640; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://bocatoma-hotel-resort.com"; reference:url,www.malwarepatrol.net; fid:146678; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://brasilterra.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:102444; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://broke123.fileave.com"; reference:url,www.malwarepatrol.net; fid:127326; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://brozpeidona.110mb.com/LOARD-4SHARED"; reference:url,www.malwarepatrol.net; fid:158822; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://buitty.100free.com"; reference:url,www.malwarepatrol.net; fid:158623; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://bulldogsports.net/BYAA_phpform/https/tusparada/cat/poslates"; reference:url,www.malwarepatrol.net; fid:159371; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://bulnabi.com/shop/admin"; reference:url,www.malwarepatrol.net; fid:158368; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://busan.cefkorea.org/zip"; reference:url,www.malwarepatrol.net; fid:150949; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://c.softdowns.info/install"; reference:url,www.malwarepatrol.net; fid:148463; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://c.softdowns.info/soft"; reference:url,www.malwarepatrol.net; fid:149313; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://c339.net/spl1234567890/files"; reference:url,www.malwarepatrol.net; fid:156501; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cablemodem.fibertel.com.ar/agu10server/BounceItAll"; reference:url,www.malwarepatrol.net; fid:159501; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://caizibing.com"; reference:url,www.malwarepatrol.net; fid:136168; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://caizibing.com/ma"; reference:url,www.malwarepatrol.net; fid:136343; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cancelamentt0.googlepages.com"; reference:url,www.malwarepatrol.net; fid:77312; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cartao8578.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:103196; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cartaoespecial9.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:102650; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cartoesnovos.250x.com"; reference:url,www.malwarepatrol.net; fid:24625; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cartoeswebapaxonado.no.sapo.pt"; reference:url,www.malwarepatrol.net; fid:104401; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ccc.softdowns.info/4"; reference:url,www.malwarepatrol.net; fid:150039; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ccc213.ilive.ro"; reference:url,www.malwarepatrol.net; fid:143841; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cdisoft.info/vts_bin"; reference:url,www.malwarepatrol.net; fid:159506; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://celebsalon.net/severa"; reference:url,www.malwarepatrol.net; fid:156621; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/InfoBandAX"; reference:url,www.malwarepatrol.net; fid:136012; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/encoder"; reference:url,www.malwarepatrol.net; fid:133427; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/ieshowguide"; reference:url,www.malwarepatrol.net; fid:136007; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/infoband-headline"; reference:url,www.malwarepatrol.net; fid:136010; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/joy1004"; reference:url,www.malwarepatrol.net; fid:131533; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/joy1004/update"; reference:url,www.malwarepatrol.net; fid:133449; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/minipopup"; reference:url,www.malwarepatrol.net; fid:136014; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/nice114"; reference:url,www.malwarepatrol.net; fid:133451; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/nzelltv"; reference:url,www.malwarepatrol.net; fid:135979; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/pds"; reference:url,www.malwarepatrol.net; fid:133455; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/pds"; reference:url,www.malwarepatrol.net; fid:133458; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/pds/band"; reference:url,www.malwarepatrol.net; fid:135486; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/seoulsports"; reference:url,www.malwarepatrol.net; fid:133466; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/skylove"; reference:url,www.malwarepatrol.net; fid:133467; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/test"; reference:url,www.malwarepatrol.net; fid:135942; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/test"; reference:url,www.malwarepatrol.net; fid:146790; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/test/FreeSMS_Event"; reference:url,www.malwarepatrol.net; fid:135494; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/test/FreeScreen"; reference:url,www.malwarepatrol.net; fid:135929; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/test/TempInstall"; reference:url,www.malwarepatrol.net; fid:135772; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/test/futurepack"; reference:url,www.malwarepatrol.net; fid:135495; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/test/sponlink"; reference:url,www.malwarepatrol.net; fid:135766; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/test/tabtoolbar"; reference:url,www.malwarepatrol.net; fid:135768; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cfteam.net/test/windowspack"; reference:url,www.malwarepatrol.net; fid:135773; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://christiangoalsetting.info/Portals/_default/txt"; reference:url,www.malwarepatrol.net; fid:145086; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ciduninstall.com/bins"; reference:url,www.malwarepatrol.net; fid:125363; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cinema-film-4you.ru/files"; reference:url,www.malwarepatrol.net; fid:117344; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cityinfoplus.com"; reference:url,www.malwarepatrol.net; fid:154753; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cj.2012down.com"; reference:url,www.malwarepatrol.net; fid:152438; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://clan-as.org/D2/PROG/D2MapReveal"; reference:url,www.malwarepatrol.net; fid:149892; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cleanfile.net/.ph/1"; reference:url,www.malwarepatrol.net; fid:157615; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cleanfile.net/.ph/4"; reference:url,www.malwarepatrol.net; fid:157614; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cleanfile.net/.ph/5"; reference:url,www.malwarepatrol.net; fid:157613; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://club.telepolis.com/brindes6y"; reference:url,www.malwarepatrol.net; fid:24259; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://club.telepolis.com/dominio14"; reference:url,www.malwarepatrol.net; fid:99212; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://club.telepolis.com/fhotmail"; reference:url,www.malwarepatrol.net; fid:29000; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://club.telepolis.com/fotinhasbr"; reference:url,www.malwarepatrol.net; fid:28759; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://club.telepolis.com/lovefoto"; reference:url,www.malwarepatrol.net; fid:28086; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://club.telepolis.com/lovemidcard"; reference:url,www.malwarepatrol.net; fid:25855; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://club.telepolis.com/martapbs"; reference:url,www.malwarepatrol.net; fid:25676; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://club.telepolis.com/ocupido"; reference:url,www.malwarepatrol.net; fid:29592; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://club.telepolis.com/paravoce"; reference:url,www.malwarepatrol.net; fid:29267; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://club.telepolis.com/vejaisto2006"; reference:url,www.malwarepatrol.net; fid:30183; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://club.telepolis.com/webcard"; reference:url,www.malwarepatrol.net; fid:27492; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://club.telepolis.com/webmail2"; reference:url,www.malwarepatrol.net; fid:29719; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cmoney.co.kr/reward/jdisk/file"; reference:url,www.malwarepatrol.net; fid:138962; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cnfg.maxsitesrevenues.net/download"; reference:url,www.malwarepatrol.net; fid:136055; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cobrancafinivest.110mb.com"; reference:url,www.malwarepatrol.net; fid:154470; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://comprovantesdeposito.googlecode.com/files"; reference:url,www.malwarepatrol.net; fid:123640; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://comunidade777.110mb.com"; reference:url,www.malwarepatrol.net; fid:121571; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://config.koreamessenger.com/koreamessenger/mod"; reference:url,www.malwarepatrol.net; fid:125891; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://connectionsupport.org/f/bin/upload"; reference:url,www.malwarepatrol.net; fid:159235; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://correiosweb.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:96202; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cprzafra.juntaextremadura.net"; reference:url,www.malwarepatrol.net; fid:88364; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cprzafra.juntaextremadura.net/cer"; reference:url,www.malwarepatrol.net; fid:88427; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://crimes-cabulusos.110mb.com"; reference:url,www.malwarepatrol.net; fid:155403; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://curriculo.2010.hotmail.ru"; reference:url,www.malwarepatrol.net; fid:143701; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://cwxtx.com/Web/_files"; reference:url,www.malwarepatrol.net; fid:158993; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://d.blizzard-us.com"; reference:url,www.malwarepatrol.net; fid:157064; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://d.shasanguo.com/623"; reference:url,www.malwarepatrol.net; fid:150041; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://d.trymedia.com/dd/iwin/1h_pkg542/iwin_cnet"; reference:url,www.malwarepatrol.net; fid:127125; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://d1.downxia.net/downloader"; reference:url,www.malwarepatrol.net; fid:159213; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://d1.downxia.net/products/0826/8"; reference:url,www.malwarepatrol.net; fid:159278; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://d1.downxia.net/products/0902/8"; reference:url,www.malwarepatrol.net; fid:159509; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://d221127.u-telcom.net/lashatt"; reference:url,www.malwarepatrol.net; fid:146602; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dadi518.com/images"; reference:url,www.malwarepatrol.net; fid:158685; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://danceevent.com"; reference:url,www.malwarepatrol.net; fid:146081; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://datz.ca"; reference:url,www.malwarepatrol.net; fid:153546; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dbiesheuvel.nl/aspnet_client/system_web"; reference:url,www.malwarepatrol.net; fid:128596; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dc148.4shared.com/download/lg4tSf9v"; reference:url,www.malwarepatrol.net; fid:158721; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dcquick.com"; reference:url,www.malwarepatrol.net; fid:158546; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ddona.3322.org/down"; reference:url,www.malwarepatrol.net; fid:158827; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://deathstar.fileave.com"; reference:url,www.malwarepatrol.net; fid:136345; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://delicioushistory.com/pup"; reference:url,www.malwarepatrol.net; fid:150801; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dellamore1.com"; reference:url,www.malwarepatrol.net; fid:157075; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://densmail.com/dff"; reference:url,www.malwarepatrol.net; fid:115662; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://design.whateverstarbiz.com"; reference:url,www.malwarepatrol.net; fid:155851; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dgappm.com/P"; reference:url,www.malwarepatrol.net; fid:152609; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://diablo113hacks.webs.com"; reference:url,www.malwarepatrol.net; fid:146051; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://digitalcv.net/wp-admin"; reference:url,www.malwarepatrol.net; fid:150975; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dindindopv.bravehost.com"; reference:url,www.malwarepatrol.net; fid:92940; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://directvirus.com"; reference:url,www.malwarepatrol.net; fid:152613; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ditto.arpa.org/~phelix/dnr"; reference:url,www.malwarepatrol.net; fid:70499; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ditto.arpa.org/~phelix/dnr"; reference:url,www.malwarepatrol.net; fid:70517; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ditto.arpa.org/~phelix/dnr/68.162.236.27"; reference:url,www.malwarepatrol.net; fid:70588; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ditto.arpa.org/~phelix/dnr/banme"; reference:url,www.malwarepatrol.net; fid:70563; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl-web.dropbox.com/u/10291766"; reference:url,www.malwarepatrol.net; fid:158839; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl-web.dropbox.com/u/10617892"; reference:url,www.malwarepatrol.net; fid:159376; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl-web.dropbox.com/u/10768579"; reference:url,www.malwarepatrol.net; fid:159512; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl-web.dropbox.com/u/9926334"; reference:url,www.malwarepatrol.net; fid:157582; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.c3z5i.com/sh16"; reference:url,www.malwarepatrol.net; fid:150472; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.commentcamarche.net/es.kioskea.net/download/files"; reference:url,www.malwarepatrol.net; fid:152918; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.dropbox.com/u/8248604"; reference:url,www.malwarepatrol.net; fid:150978; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.dropbox.com/u/8447196"; reference:url,www.malwarepatrol.net; fid:149883; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.dropbox.com/u/9730860"; reference:url,www.malwarepatrol.net; fid:157882; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.f2d6u.com/sx21"; reference:url,www.malwarepatrol.net; fid:151769; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.f2s5b.com/rz12"; reference:url,www.malwarepatrol.net; fid:152614; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.get-torrent.com/NP_0350"; reference:url,www.malwarepatrol.net; fid:112389; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.s3t5n.com/rj07"; reference:url,www.malwarepatrol.net; fid:152615; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.targetsaver.com/2k"; reference:url,www.malwarepatrol.net; fid:27219; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.tv009.com"; reference:url,www.malwarepatrol.net; fid:156406; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.w1j2v.com/sx21"; reference:url,www.malwarepatrol.net; fid:150740; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/101914604/NP_0411"; reference:url,www.malwarepatrol.net; fid:137020; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/115728693/NP_0411"; reference:url,www.malwarepatrol.net; fid:137040; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/132498043/NP_0411"; reference:url,www.malwarepatrol.net; fid:137028; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/161947294/NP_0411"; reference:url,www.malwarepatrol.net; fid:137001; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/188990879/NP_0411"; reference:url,www.malwarepatrol.net; fid:137021; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/21676067/NP_0411"; reference:url,www.malwarepatrol.net; fid:137002; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/22438133/NP_0411"; reference:url,www.malwarepatrol.net; fid:137094; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/228708736/NP_0411"; reference:url,www.malwarepatrol.net; fid:137013; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/234053059/NP_0411"; reference:url,www.malwarepatrol.net; fid:137090; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/270901993/NP_0411"; reference:url,www.malwarepatrol.net; fid:137003; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/293558977/NP_0411"; reference:url,www.malwarepatrol.net; fid:137034; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/305741915/NP_0411"; reference:url,www.malwarepatrol.net; fid:137036; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/313778611/NP_0411"; reference:url,www.malwarepatrol.net; fid:137030; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/313836770/NP_0411"; reference:url,www.malwarepatrol.net; fid:137004; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/328576841/NP_0411"; reference:url,www.malwarepatrol.net; fid:137022; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/338776923/NP_0411"; reference:url,www.malwarepatrol.net; fid:137005; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/342552115/NP_0411"; reference:url,www.malwarepatrol.net; fid:137014; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/361946202/NP_0411"; reference:url,www.malwarepatrol.net; fid:137019; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/370052187/NP_0411"; reference:url,www.malwarepatrol.net; fid:137029; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/379948245/NP_0411"; reference:url,www.malwarepatrol.net; fid:137089; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/41943791/NP_0411"; reference:url,www.malwarepatrol.net; fid:137087; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/436707815/NP_0411"; reference:url,www.malwarepatrol.net; fid:137026; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/445968912/NP_0411"; reference:url,www.malwarepatrol.net; fid:137088; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/491879043/NP_0411"; reference:url,www.malwarepatrol.net; fid:137031; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/502311457/NP_0411"; reference:url,www.malwarepatrol.net; fid:137051; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/542302944/NP_0411"; reference:url,www.malwarepatrol.net; fid:137012; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/549655327/NP_0411"; reference:url,www.malwarepatrol.net; fid:137043; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/560861264/NP_0411"; reference:url,www.malwarepatrol.net; fid:137052; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/586894874/NP_0411"; reference:url,www.malwarepatrol.net; fid:137042; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/598462223/NP_0411"; reference:url,www.malwarepatrol.net; fid:137015; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/619924920/NP_0411"; reference:url,www.malwarepatrol.net; fid:137017; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/639217611/NP_0411"; reference:url,www.malwarepatrol.net; fid:137045; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/646117247/NP_0411"; reference:url,www.malwarepatrol.net; fid:137027; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/663466139/NP_0411"; reference:url,www.malwarepatrol.net; fid:137024; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/688482318/NP_0411"; reference:url,www.malwarepatrol.net; fid:137006; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/723597905/NP_0411"; reference:url,www.malwarepatrol.net; fid:137018; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/74024161/NP_0411"; reference:url,www.malwarepatrol.net; fid:137025; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/741833295/NP_0411"; reference:url,www.malwarepatrol.net; fid:137047; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/761813823/NP_0411"; reference:url,www.malwarepatrol.net; fid:137035; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/762517664/NP_0411"; reference:url,www.malwarepatrol.net; fid:137037; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/795359932/NP_0411"; reference:url,www.malwarepatrol.net; fid:137007; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/805293462/NP_0411"; reference:url,www.malwarepatrol.net; fid:137008; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/821929250/NP_0411"; reference:url,www.malwarepatrol.net; fid:137009; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/825980629/NP_0411"; reference:url,www.malwarepatrol.net; fid:137041; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/846259666/NP_0411"; reference:url,www.malwarepatrol.net; fid:137093; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/849411727/NP_0411"; reference:url,www.malwarepatrol.net; fid:137044; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/871960898/NP_0411"; reference:url,www.malwarepatrol.net; fid:137016; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/881509081/NP_0411"; reference:url,www.malwarepatrol.net; fid:137050; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/890067471/NP_0411"; reference:url,www.malwarepatrol.net; fid:137038; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/936093233/NP_0411"; reference:url,www.malwarepatrol.net; fid:137010; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/938176933/NP_0411"; reference:url,www.malwarepatrol.net; fid:137023; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/956400375/NP_0411"; reference:url,www.malwarepatrol.net; fid:137011; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/969650095/NP_0411"; reference:url,www.malwarepatrol.net; fid:137032; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/994434695/NP_0411"; reference:url,www.malwarepatrol.net; fid:137039; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/998139905/NP_0411"; reference:url,www.malwarepatrol.net; fid:137092; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.winzix.com/999523279/NP_0411"; reference:url,www.malwarepatrol.net; fid:137046; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl.y3s5n.com/sa13"; reference:url,www.malwarepatrol.net; fid:150732; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl11.downxiazai.info/dl11"; reference:url,www.malwarepatrol.net; fid:142339; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl228.down-host.info/download7"; reference:url,www.malwarepatrol.net; fid:138609; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl4hack.com/ptf/bargh0-bad2"; reference:url,www.malwarepatrol.net; fid:154488; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl4hack.com/ptf/ffti2"; reference:url,www.malwarepatrol.net; fid:140860; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl4hack.com/ptf/keyvan2"; reference:url,www.malwarepatrol.net; fid:138847; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl4hack.com/ptf/llvllr.l2amin12"; reference:url,www.malwarepatrol.net; fid:129174; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dl4hack.com/ptf/server2-server082"; reference:url,www.malwarepatrol.net; fid:136060; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dlhosts.in"; reference:url,www.malwarepatrol.net; fid:159378; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://domainperline.com"; reference:url,www.malwarepatrol.net; fid:153222; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dosclean.com/app/files"; reference:url,www.malwarepatrol.net; fid:157680; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.27-net.com"; reference:url,www.malwarepatrol.net; fid:156137; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.360shaduruanjian.com/zhaodlldown"; reference:url,www.malwarepatrol.net; fid:159003; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.49558.cn/soft"; reference:url,www.malwarepatrol.net; fid:155968; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.9978.net"; reference:url,www.malwarepatrol.net; fid:126332; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.brownsoft.net/download"; reference:url,www.malwarepatrol.net; fid:130350; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.brownsoft.net/mvsong"; reference:url,www.malwarepatrol.net; fid:147849; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.cknovt.com/axpsav/bhon"; reference:url,www.malwarepatrol.net; fid:154327; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.cknovt.com/axvsav/bhon"; reference:url,www.malwarepatrol.net; fid:154494; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.cknovt.com/ciclob/bhon"; reference:url,www.malwarepatrol.net; fid:149916; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.cknovt.com/ciytn/bhon"; reference:url,www.malwarepatrol.net; fid:154314; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.cknovt.com/ckj/bhon"; reference:url,www.malwarepatrol.net; fid:148997; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.cknovt.com/cyvol/bhon"; reference:url,www.malwarepatrol.net; fid:154332; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.cnovt.com/cn1/krmc/bhon"; reference:url,www.malwarepatrol.net; fid:141273; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.cnovt.com/cn2/cqy/bhon"; reference:url,www.malwarepatrol.net; fid:153549; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.cnovt.com/cn2/cwu/bhon"; reference:url,www.malwarepatrol.net; fid:147850; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.cnovt.com/cn2/cziao/bhon"; reference:url,www.malwarepatrol.net; fid:150363; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.cnovt.com/cn2/krmo/bhon"; reference:url,www.malwarepatrol.net; fid:147676; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.ezprotect.co.kr"; reference:url,www.malwarepatrol.net; fid:143606; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.jslguide.com/down"; reference:url,www.malwarepatrol.net; fid:138605; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.megaprotect.co.kr/download"; reference:url,www.malwarepatrol.net; fid:139561; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.navysoft.org/download"; reference:url,www.malwarepatrol.net; fid:117372; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.neoprotect.com"; reference:url,www.malwarepatrol.net; fid:150606; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.nzell.com"; reference:url,www.malwarepatrol.net; fid:145691; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.olivesoft.net/download"; reference:url,www.malwarepatrol.net; fid:127467; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.olivesoft.net/download"; reference:url,www.malwarepatrol.net; fid:127482; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.olivesoft.net/download/upmodule"; reference:url,www.malwarepatrol.net; fid:129516; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.p2pplay.com/x"; reference:url,www.malwarepatrol.net; fid:141154; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.pc-up.co.kr"; reference:url,www.malwarepatrol.net; fid:139035; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.pinksoft.org/download"; reference:url,www.malwarepatrol.net; fid:131492; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.pinksoft.org/download"; reference:url,www.malwarepatrol.net; fid:135607; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.pinksoft.org/download/servi"; reference:url,www.malwarepatrol.net; fid:126997; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.ppfull.net"; reference:url,www.malwarepatrol.net; fid:126000; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.privacyclean.co.kr"; reference:url,www.malwarepatrol.net; fid:145099; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.privacykorea.com"; reference:url,www.malwarepatrol.net; fid:144283; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.privacyok.co.kr/20/"; reference:url,www.malwarepatrol.net; fid:145100; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.qqkuyou.cn/soft"; reference:url,www.malwarepatrol.net; fid:155635; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.rprotect.co.kr"; reference:url,www.malwarepatrol.net; fid:145996; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.rprotect.co.kr/rprotect"; reference:url,www.malwarepatrol.net; fid:148009; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.unovt.com/urovez/bhon"; reference:url,www.malwarepatrol.net; fid:150054; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.violetsoft.net/download"; reference:url,www.malwarepatrol.net; fid:131562; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.violetsoft.net/download"; reference:url,www.malwarepatrol.net; fid:139491; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.violetsoft.net/download/newpopup"; reference:url,www.malwarepatrol.net; fid:131468; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down.webemul.com/down"; reference:url,www.malwarepatrol.net; fid:141278; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://down1.yx.baidu.com/loader/000000"; reference:url,www.malwarepatrol.net; fid:144520; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.drspyzero.com/program"; reference:url,www.malwarepatrol.net; fid:139386; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.dvd-ripper-copy.com"; reference:url,www.malwarepatrol.net; fid:148902; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.gamerkraft.com/PT2_EN_Downloads/Full_Client"; reference:url,www.malwarepatrol.net; fid:152621; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.gamezmission.com/toolbar/gamezmission/download/installer/2.5.1010.r11420/000017_umS"; reference:url,www.malwarepatrol.net; fid:144285; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.gamezmission.com/toolbar/gamezmission/download/installer/2.5.1010.r11420/000019_XtM"; reference:url,www.malwarepatrol.net; fid:144047; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.gamezmission.com/toolbar/gamezmission/download/installer/2.5.1010.r11420/000020_lGP"; reference:url,www.malwarepatrol.net; fid:144286; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.gameztar.com/toolbar/gameztar/download/rellatsni/2.1.102.r6380/000002_NI9"; reference:url,www.malwarepatrol.net; fid:126001; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.gamiearcade.com/toolbar/gamiearcade/download/updater/3.8.16.r9320/000016_SIr"; reference:url,www.malwarepatrol.net; fid:155638; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.gamiearcade.com/toolbar/gamiearcade/download/updater/3.8.16.r9320/000022_14m"; reference:url,www.malwarepatrol.net; fid:157086; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.gamieplay.com/toolbar/gamieplay/download/installer/3.7.1014.r8090/000007_5BQ"; reference:url,www.malwarepatrol.net; fid:147684; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.gamieplay.com/toolbar/gamieplay/download/installer/3.7.1014.r8090/000008_rPq"; reference:url,www.malwarepatrol.net; fid:147425; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.gamieplay.com/toolbar/gamieplay/download/installer/3.7.1014.r8090/000009_5xs"; reference:url,www.malwarepatrol.net; fid:147852; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.gamieplay.com/toolbar/gamieplay/download/installer/3.7.1014.r8090/000011_igj"; reference:url,www.malwarepatrol.net; fid:148015; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.gamieplay.com/toolbar/gamieplay/download/installer/3.7.1014.r8090/000013_cCw"; reference:url,www.malwarepatrol.net; fid:148258; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.gamieplay.com/toolbar/gamieplay/download/installer/3.7.1014.r8090/000017_Rly"; reference:url,www.malwarepatrol.net; fid:148708; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.gamieplay.com/toolbar/gamieplay/download/installer/3.7.1014.r8090/000019_o2G"; reference:url,www.malwarepatrol.net; fid:148712; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.gamieplay.com/toolbar/gamieplay/download/installer/3.7.1014.r8090/000020_ogY"; reference:url,www.malwarepatrol.net; fid:148991; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.handygamez.com/toolbar/handygamez/download/installer/2.4.108.r10440/000025_lGP"; reference:url,www.malwarepatrol.net; fid:140005; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.handygamez.com/toolbar/handygamez/download/installer/2.4.108.r10440/000026_sd4"; reference:url,www.malwarepatrol.net; fid:140006; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.handygamez.com/toolbar/handygamez/download/installer/2.4.108.r10440/000028_9t1"; reference:url,www.malwarepatrol.net; fid:140285; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.hottiearcade.com/toolbar/hottiearcade/download/updater/3.8.17.r9320/000008_lJr"; reference:url,www.malwarepatrol.net; fid:155348; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.hottiearcade.com/toolbar/hottiearcade/download/updater/3.8.17.r9320/000016_kZl"; reference:url,www.malwarepatrol.net; fid:155640; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.hottiearcade.com/toolbar/hottiearcade/download/updater/3.8.17.r9320/000022_ZfC"; reference:url,www.malwarepatrol.net; fid:156629; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.hottiearea.com/toolbar/hottiearea/download/installer/2.4.109.r10440/000023_OMF"; reference:url,www.malwarepatrol.net; fid:139701; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.hottiearea.com/toolbar/hottiearea/download/installer/2.4.109.r10440/000024_YwW"; reference:url,www.malwarepatrol.net; fid:140007; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.hottiearea.com/toolbar/hottiearea/download/installer/2.4.109.r10440/000025_lGP"; reference:url,www.malwarepatrol.net; fid:140008; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.hottiearea.com/toolbar/hottiearea/download/installer/2.4.109.r10440/000026_vrd"; reference:url,www.malwarepatrol.net; fid:140009; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.hottiearea.com/toolbar/hottiearea/download/installer/2.4.109.r10440/000028_I3n"; reference:url,www.malwarepatrol.net; fid:140286; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.hottieregion.com/toolbar/hottieregion/download/installer/3.7.1015.r8090/000007_XdM"; reference:url,www.malwarepatrol.net; fid:147426; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.hottieregion.com/toolbar/hottieregion/download/installer/3.7.1015.r8090/000010_y5v"; reference:url,www.malwarepatrol.net; fid:147853; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.hottieregion.com/toolbar/hottieregion/download/installer/3.7.1015.r8090/000011_gCC"; reference:url,www.malwarepatrol.net; fid:148016; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.hottieregion.com/toolbar/hottieregion/download/installer/3.7.1015.r8090/000013_0FQ"; reference:url,www.malwarepatrol.net; fid:148259; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.hottieregion.com/toolbar/hottieregion/download/installer/3.7.1015.r8090/000017_PjU"; reference:url,www.malwarepatrol.net; fid:148702; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.hottieregion.com/toolbar/hottieregion/download/installer/3.7.1015.r8090/000019_9QQ"; reference:url,www.malwarepatrol.net; fid:148913; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.hottieregion.com/toolbar/hottieregion/download/installer/3.7.1015.r8090/000020_42d"; reference:url,www.malwarepatrol.net; fid:148977; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.juicyjunction.com/toolbar/juicyjunction/download/installer/2.5.1011.r11420/000016_nOl"; reference:url,www.malwarepatrol.net; fid:144287; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.juicyjunction.com/toolbar/juicyjunction/download/installer/2.5.1011.r11420/000017_umR"; reference:url,www.malwarepatrol.net; fid:144288; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.juicyjunction.com/toolbar/juicyjunction/download/installer/2.5.1011.r11420/000018_NI8"; reference:url,www.malwarepatrol.net; fid:144289; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.juicyjunction.com/toolbar/juicyjunction/download/installer/2.5.1011.r11420/000019_XsI"; reference:url,www.malwarepatrol.net; fid:144048; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.juicyjunction.com/toolbar/juicyjunction/download/installer/2.5.1011.r11420/000020_kCB"; reference:url,www.malwarepatrol.net; fid:144290; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.juicypalace.com/toolbar/juicypalace/download/updater/2.3.7.r9080/000006_lGP"; reference:url,www.malwarepatrol.net; fid:128597; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.minidvdsoft.com"; reference:url,www.malwarepatrol.net; fid:127633; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.pcsafe.kr/program"; reference:url,www.malwarepatrol.net; fid:141159; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.safevaccine.net/program/safevaccine/SetupFile"; reference:url,www.malwarepatrol.net; fid:144634; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://download.softpedia.com/dl/8850376203a08d74f18b55aad989a101/4a8add6f/100125036/software/tweak"; reference:url,www.malwarepatrol.net; fid:115968; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://downloadseguros.gratix.com.br"; reference:url,www.malwarepatrol.net; fid:152623; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ds.keyname.co.kr/kname2"; reference:url,www.malwarepatrol.net; fid:147431; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ds.keyname.co.kr/toolbar"; reference:url,www.malwarepatrol.net; fid:139384; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ds.remoney.co.kr/seremoney"; reference:url,www.malwarepatrol.net; fid:145111; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ds.web-key.co.kr/toolbar"; reference:url,www.malwarepatrol.net; fid:131163; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://durum.du.ohost.de"; reference:url,www.malwarepatrol.net; fid:148794; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://dx5.97sky.cn"; reference:url,www.malwarepatrol.net; fid:157275; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://e-insuranceonline.biz/common/includes"; reference:url,www.malwarepatrol.net; fid:149923; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://e-insuranceonline.biz/images"; reference:url,www.malwarepatrol.net; fid:149929; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://e.1.20532858.com"; reference:url,www.malwarepatrol.net; fid:158550; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ebestsite.co.kr/down3"; reference:url,www.malwarepatrol.net; fid:124281; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://echanblardwebsite.free.fr/eChanblard"; reference:url,www.malwarepatrol.net; fid:148966; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://edirrelojoeiro.com.br"; reference:url,www.malwarepatrol.net; fid:95372; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://editoraabril2007.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:57956; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://edrin56.fileave.com"; reference:url,www.malwarepatrol.net; fid:137758; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://egylionz.fileave.com"; reference:url,www.malwarepatrol.net; fid:159535; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://elefant.ru/data"; reference:url,www.malwarepatrol.net; fid:159011; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://elitpit.ru"; reference:url,www.malwarepatrol.net; fid:142076; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://enturturis.dominiotemporario.com"; reference:url,www.malwarepatrol.net; fid:154790; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://epikhigh.raonnet.com"; reference:url,www.malwarepatrol.net; fid:159537; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://epointplus.com/Info/Program/aaaa"; reference:url,www.malwarepatrol.net; fid:128742; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://eq.pccppc.com/vr"; reference:url,www.malwarepatrol.net; fid:148264; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://es.software.canon-europe.com/files/soft23215/software"; reference:url,www.malwarepatrol.net; fid:131462; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://estrupojoacaba.fileave.com"; reference:url,www.malwarepatrol.net; fid:109202; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://euro-conta.ro/cp/scripts"; reference:url,www.malwarepatrol.net; fid:130516; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://euronicsit.com"; reference:url,www.malwarepatrol.net; fid:159292; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://exe.146843.com"; reference:url,www.malwarepatrol.net; fid:159380; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://exes.146843.com"; reference:url,www.malwarepatrol.net; fid:159538; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://existence1.ex.ohost.de"; reference:url,www.malwarepatrol.net; fid:140165; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://f-forge.com"; reference:url,www.malwarepatrol.net; fid:36358; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://f.zwfu.net/js"; reference:url,www.malwarepatrol.net; fid:155982; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://fadfs55.fileave.com"; reference:url,www.malwarepatrol.net; fid:140889; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://fancycake.net/.ph/1"; reference:url,www.malwarepatrol.net; fid:158015; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://fancycake.net/.ph/3"; reference:url,www.malwarepatrol.net; fid:158013; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://fancycake.net/.ph/4"; reference:url,www.malwarepatrol.net; fid:158012; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://fancycake.net/.ph/5"; reference:url,www.malwarepatrol.net; fid:158011; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://favoclick.com/file"; reference:url,www.malwarepatrol.net; fid:158479; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://fhesh.smtp.ru"; reference:url,www.malwarepatrol.net; fid:155429; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://file.adcare.kr/setup"; reference:url,www.malwarepatrol.net; fid:156885; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://file.donkeyp2p.com/download/donkeytb"; reference:url,www.malwarepatrol.net; fid:129576; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://file.fileave.com"; reference:url,www.malwarepatrol.net; fid:159345; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://file.free-save.com/install"; reference:url,www.malwarepatrol.net; fid:138485; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://file.homeprotect.co.kr"; reference:url,www.malwarepatrol.net; fid:157773; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://file.homeprotect.co.kr/reset_2010"; reference:url,www.malwarepatrol.net; fid:150988; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://file.mongfile.net"; reference:url,www.malwarepatrol.net; fid:158465; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://file.privacyme.co.kr/install_2010"; reference:url,www.malwarepatrol.net; fid:146017; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://fileanchor.com"; reference:url,www.malwarepatrol.net; fid:16589; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://filehosting-space.co.cc/sp"; reference:url,www.malwarepatrol.net; fid:159545; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://filepop.co.kr/App/auto"; reference:url,www.malwarepatrol.net; fid:157222; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://flashplayer.home.sapo.pt"; reference:url,www.malwarepatrol.net; fid:105615; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://floranimal.ru/articles/mashrooms/zh"; reference:url,www.malwarepatrol.net; fid:146289; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://flyingwings.ch/shop/images/watch"; reference:url,www.malwarepatrol.net; fid:150793; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://forecal.com/templates/beez/images/central"; reference:url,www.malwarepatrol.net; fid:158379; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://fotobookentreamigos.com/images"; reference:url,www.malwarepatrol.net; fid:159383; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://fotoemsg.110mb.com"; reference:url,www.malwarepatrol.net; fid:107825; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://fotoslindas0909.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:93688; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://fotoslinks439856.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:99905; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://fotosminha.fileave.com"; reference:url,www.malwarepatrol.net; fid:106840; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://fotostv.fileave.com"; reference:url,www.malwarepatrol.net; fid:106848; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://fox05t.hotmail.ru"; reference:url,www.malwarepatrol.net; fid:155438; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://freefilehosting.net"; reference:url,www.malwarepatrol.net; fid:34848; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://freeweb.siol.net/smitmar3"; reference:url,www.malwarepatrol.net; fid:43587; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ftp-idc.pconline.com.cn/pub/download/200911"; reference:url,www.malwarepatrol.net; fid:126005; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://funnysoft.net/sreng"; reference:url,www.malwarepatrol.net; fid:146115; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://gaccess.dynsite.net"; reference:url,www.malwarepatrol.net; fid:140673; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://gate109.info/hcdshell"; reference:url,www.malwarepatrol.net; fid:155370; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://gbsup.com"; reference:url,www.malwarepatrol.net; fid:150792; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://geo95.com"; reference:url,www.malwarepatrol.net; fid:156246; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://germinaler4he.info/k4"; reference:url,www.malwarepatrol.net; fid:157023; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://gfxsupport.fileave.com"; reference:url,www.malwarepatrol.net; fid:159385; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://giconsultoria.com/Hallmark"; reference:url,www.malwarepatrol.net; fid:146724; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://gite-eguisheim.com/images"; reference:url,www.malwarepatrol.net; fid:147232; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://gizemguvenfanatikleri.googlepages.com"; reference:url,www.malwarepatrol.net; fid:103560; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://gmahgf.ttqipai.com"; reference:url,www.malwarepatrol.net; fid:156403; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://gmblog04.fileave.com"; reference:url,www.malwarepatrol.net; fid:139012; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://gooble-analytics.com"; reference:url,www.malwarepatrol.net; fid:159017; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://greuel.net/dns"; reference:url,www.malwarepatrol.net; fid:151999; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://grisotab.tempsite.ws"; reference:url,www.malwarepatrol.net; fid:140016; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://gun-emlak.com"; reference:url,www.malwarepatrol.net; fid:151392; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://guta.hotmail.ru"; reference:url,www.malwarepatrol.net; fid:155416; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://gyfsanimados2009.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:102078; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://h1.ripway.com/David19922010"; reference:url,www.malwarepatrol.net; fid:157092; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://h1.ripway.com/azerty2011"; reference:url,www.malwarepatrol.net; fid:156636; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://h1.ripway.com/hac9ed"; reference:url,www.malwarepatrol.net; fid:148987; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://h1.ripway.com/imlancel"; reference:url,www.malwarepatrol.net; fid:154801; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://h1.ripway.com/jojoandmore1"; reference:url,www.malwarepatrol.net; fid:159559; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://h1.ripway.com/stoneytheman"; reference:url,www.malwarepatrol.net; fid:152634; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://h3x0s2.fileave.com"; reference:url,www.malwarepatrol.net; fid:140896; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://habboserver.atspace.com"; reference:url,www.malwarepatrol.net; fid:102043; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://haimadhav.googlepages.com"; reference:url,www.malwarepatrol.net; fid:102036; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://hakaymobilya.com"; reference:url,www.malwarepatrol.net; fid:95393; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://helhetreklam.se"; reference:url,www.malwarepatrol.net; fid:157939; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://helpdesk.xcolabs.com/suporte"; reference:url,www.malwarepatrol.net; fid:157874; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://hentaimoviez.com/ct"; reference:url,www.malwarepatrol.net; fid:127219; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://hispanicosantafe.org.ar"; reference:url,www.malwarepatrol.net; fid:95002; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://home.educities.edu.tw/netwarecai/download"; reference:url,www.malwarepatrol.net; fid:151396; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://homecards11.no.sapo.pt"; reference:url,www.malwarepatrol.net; fid:34840; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://horizon-vendenheim.com/downloads"; reference:url,www.malwarepatrol.net; fid:159288; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://host1ng.com"; reference:url,www.malwarepatrol.net; fid:150995; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://hosting.free2w.com"; reference:url,www.malwarepatrol.net; fid:34956; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://hotfile.com/dl/57955527/eec7a3d"; reference:url,www.malwarepatrol.net; fid:155115; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://hotfile.com/dl/57955539/555a4b5"; reference:url,www.malwarepatrol.net; fid:155114; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://hotfile.com/dl/63699873/f4fd50e"; reference:url,www.malwarepatrol.net; fid:158385; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://hotfile.com/dl/64442971/4c260b3"; reference:url,www.malwarepatrol.net; fid:158386; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://hotfile.com/dl/64443064/1df1828"; reference:url,www.malwarepatrol.net; fid:158738; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://hotfile.com/dl/65429818/286422b"; reference:url,www.malwarepatrol.net; fid:159021; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://hotfile.com/dl/65888303/9df965b"; reference:url,www.malwarepatrol.net; fid:159562; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://hotmailtorpedos2008.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:93132; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://hronumers.com/it507"; reference:url,www.malwarepatrol.net; fid:156168; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://hsbc.fileave.com"; reference:url,www.malwarepatrol.net; fid:103009; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://humano.ya.com/parperfeitopa28"; reference:url,www.malwarepatrol.net; fid:33767; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://hysa.us"; reference:url,www.malwarepatrol.net; fid:151398; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://icalledya.com/oly"; reference:url,www.malwarepatrol.net; fid:156129; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ifjsdafibn.fileave.com"; reference:url,www.malwarepatrol.net; fid:141634; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://iliil.net"; reference:url,www.malwarepatrol.net; fid:156005; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://imagemfotos.110mb.com"; reference:url,www.malwarepatrol.net; fid:156154; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img242.imageshack.us/img242/7339"; reference:url,www.malwarepatrol.net; fid:96921; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img242.imageshack.us/img242/7405"; reference:url,www.malwarepatrol.net; fid:97056; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img242.imageshack.us/img242/7442"; reference:url,www.malwarepatrol.net; fid:96336; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img242.imageshack.us/img242/7499"; reference:url,www.malwarepatrol.net; fid:96440; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img242.imageshack.us/img242/7853"; reference:url,www.malwarepatrol.net; fid:96978; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img242.imageshack.us/img242/79"; reference:url,www.malwarepatrol.net; fid:97167; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img242.imageshack.us/img242/7923"; reference:url,www.malwarepatrol.net; fid:96491; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img242.imageshack.us/img242/8017"; reference:url,www.malwarepatrol.net; fid:97156; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img242.imageshack.us/img242/8981"; reference:url,www.malwarepatrol.net; fid:96743; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img242.imageshack.us/img242/9206"; reference:url,www.malwarepatrol.net; fid:97066; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img242.imageshack.us/img242/9379"; reference:url,www.malwarepatrol.net; fid:96847; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img242.imageshack.us/img242/9673"; reference:url,www.malwarepatrol.net; fid:97246; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img242.imageshack.us/img242/9728"; reference:url,www.malwarepatrol.net; fid:97097; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img503.imageshack.us/img503/1238"; reference:url,www.malwarepatrol.net; fid:97194; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img503.imageshack.us/img503/1316"; reference:url,www.malwarepatrol.net; fid:96564; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img503.imageshack.us/img503/1369"; reference:url,www.malwarepatrol.net; fid:96964; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img503.imageshack.us/img503/1560"; reference:url,www.malwarepatrol.net; fid:96447; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img503.imageshack.us/img503/2185"; reference:url,www.malwarepatrol.net; fid:96831; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img503.imageshack.us/img503/5394"; reference:url,www.malwarepatrol.net; fid:96863; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img503.imageshack.us/img503/5919"; reference:url,www.malwarepatrol.net; fid:96993; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img503.imageshack.us/img503/5984"; reference:url,www.malwarepatrol.net; fid:96686; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img503.imageshack.us/img503/6342"; reference:url,www.malwarepatrol.net; fid:96427; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img503.imageshack.us/img503/6357"; reference:url,www.malwarepatrol.net; fid:96986; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img503.imageshack.us/img503/6806"; reference:url,www.malwarepatrol.net; fid:97161; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://img503.imageshack.us/img503/8241"; reference:url,www.malwarepatrol.net; fid:96369; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://indir.cikcik.com"; reference:url,www.malwarepatrol.net; fid:156006; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://indumol.com"; reference:url,www.malwarepatrol.net; fid:95592; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://inferie.de/Sicherung"; reference:url,www.malwarepatrol.net; fid:154294; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://info-consult.ru/cons/poll//misc"; reference:url,www.malwarepatrol.net; fid:150115; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://informatique-internet.leadhoster.com"; reference:url,www.malwarepatrol.net; fid:156008; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://infotera.net/Skin/Letter/letter00"; reference:url,www.malwarepatrol.net; fid:159458; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ins.miniwidget.co.kr"; reference:url,www.malwarepatrol.net; fid:145607; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://install.xxxtoolbar.com/ist/softwares/bundlers"; reference:url,www.malwarepatrol.net; fid:146009; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://installer.tangotoolbar.com/f3"; reference:url,www.malwarepatrol.net; fid:152784; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://instamfan.net/chan/star"; reference:url,www.malwarepatrol.net; fid:159299; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://intouchcc.com"; reference:url,www.malwarepatrol.net; fid:116417; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ip.yihaha.org"; reference:url,www.malwarepatrol.net; fid:151405; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ip.yihaha.org/soft"; reference:url,www.malwarepatrol.net; fid:151404; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://irpf2007anual.googlepages.com"; reference:url,www.malwarepatrol.net; fid:80018; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://isearchmoa.com/inetcreative/zone"; reference:url,www.malwarepatrol.net; fid:103542; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://itappm.com/P"; reference:url,www.malwarepatrol.net; fid:152636; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://iwc.funnycode.co.kr"; reference:url,www.malwarepatrol.net; fid:137298; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://jdbye.fragmentedforce.com"; reference:url,www.malwarepatrol.net; fid:136299; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://jdbye.fragmentedforce.com/.."; reference:url,www.malwarepatrol.net; fid:136301; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://jdbye.fragmentedforce.com/../.."; reference:url,www.malwarepatrol.net; fid:136303; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://jdbye.fragmentedforce.com/../../.."; reference:url,www.malwarepatrol.net; fid:136574; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://jennythpopun.googlepages.com"; reference:url,www.malwarepatrol.net; fid:105541; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://jhcomp1609.com/eng/css"; reference:url,www.malwarepatrol.net; fid:158683; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://jiangshan.us7.hap02.com/game"; reference:url,www.malwarepatrol.net; fid:158160; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://jiangshan.us7.hap02.com/yk"; reference:url,www.malwarepatrol.net; fid:158174; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://jinzie.com/download"; reference:url,www.malwarepatrol.net; fid:137933; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://jizzbin.com"; reference:url,www.malwarepatrol.net; fid:152637; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://josemarflaresso.com/msg"; reference:url,www.malwarepatrol.net; fid:159564; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://julia.lins.hotmail.ru"; reference:url,www.malwarepatrol.net; fid:156964; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://justanothersillydomain.org"; reference:url,www.malwarepatrol.net; fid:155253; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ka-kansas-os-at.info"; reference:url,www.malwarepatrol.net; fid:158389; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://kaksoperatingsystemat.info"; reference:url,www.malwarepatrol.net; fid:158629; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://kaksosatblog.info"; reference:url,www.malwarepatrol.net; fid:158630; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://kaksosatnow.info"; reference:url,www.malwarepatrol.net; fid:158390; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://kaksosatonline.info"; reference:url,www.malwarepatrol.net; fid:158557; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://kaksosats.info"; reference:url,www.malwarepatrol.net; fid:159567; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://kakssoftwareat.info"; reference:url,www.malwarepatrol.net; fid:158391; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://kalioret.narod.ru"; reference:url,www.malwarepatrol.net; fid:140020; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://karina-de.com/twitcam"; reference:url,www.malwarepatrol.net; fid:157589; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://komplex2.psyradio.org/email"; reference:url,www.malwarepatrol.net; fid:110875; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://koruuddos.gicp.net"; reference:url,www.malwarepatrol.net; fid:150507; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://kuwaityah.100free.com"; reference:url,www.malwarepatrol.net; fid:137936; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://l1nn.info/k4"; reference:url,www.malwarepatrol.net; fid:159169; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://leetfile.com/u"; reference:url,www.malwarepatrol.net; fid:159571; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://legkoidem.com/vserovno/files"; reference:url,www.malwarepatrol.net; fid:159455; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://lendomensagens0000.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:101663; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://lermensagens000.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:100120; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://license.2waky.com"; reference:url,www.malwarepatrol.net; fid:138306; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://liebeskummer-berlin.de/images"; reference:url,www.malwarepatrol.net; fid:92945; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://linksdefots05.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:95838; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://linksexclusao1001.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:97318; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://linksfotos001.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:97798; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://linksfotos3425.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:99652; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://lists.w3.org/Archives/Public/site-comments/2003Aug/att-0008"; reference:url,www.malwarepatrol.net; fid:37110; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://lists.w3.org/Archives/Public/www-dom/2001OctDec/att-0204"; reference:url,www.malwarepatrol.net; fid:37137; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://lists.w3.org/Archives/Public/www-ql/2001JulSep/att-0033"; reference:url,www.malwarepatrol.net; fid:37114; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://lists.w3.org/Archives/Public/www-smil/2004JulSep/att-0027"; reference:url,www.malwarepatrol.net; fid:37138; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://lists.w3.org/Archives/Public/www-style/2004Oct/att-0120"; reference:url,www.malwarepatrol.net; fid:37124; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://lists.w3.org/Archives/Public/www-webdav-dasl/2002JanMar/att-0046"; reference:url,www.malwarepatrol.net; fid:68578; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://lists.w3.org/Archives/Public/xmlschema-dev/2004Sep/att-0113"; reference:url,www.malwarepatrol.net; fid:37119; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://liu.wwvv.us/images/css/updates"; reference:url,www.malwarepatrol.net; fid:139472; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://liumeimei.wwvv.us/images/css/updates"; reference:url,www.malwarepatrol.net; fid:139465; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://livevideo.hotmail.ru"; reference:url,www.malwarepatrol.net; fid:158802; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://llreality.sk"; reference:url,www.malwarepatrol.net; fid:88239; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://lnewmensagem.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:102716; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://local.1140.co.kr/program"; reference:url,www.malwarepatrol.net; fid:139469; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://localhostr.com/files/f00d53"; reference:url,www.malwarepatrol.net; fid:156013; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://localmask2010.narod.ru/pics"; reference:url,www.malwarepatrol.net; fid:145157; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://logfotos.110mb.com"; reference:url,www.malwarepatrol.net; fid:156249; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://lolazolol.fileave.com"; reference:url,www.malwarepatrol.net; fid:141645; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://lookoutmagazine.es/themes/datacore2"; reference:url,www.malwarepatrol.net; fid:156642; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://lromanow.sites.uol.com.br"; reference:url,www.malwarepatrol.net; fid:137942; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://lulonius.net"; reference:url,www.malwarepatrol.net; fid:156134; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://lv.ust-kut.org./images"; reference:url,www.malwarepatrol.net; fid:112551; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://mab76939402.idc600.cn/doit"; reference:url,www.malwarepatrol.net; fid:140219; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://mafiaroleplay.hosting.paran.com"; reference:url,www.malwarepatrol.net; fid:145560; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://mail.citymark.com"; reference:url,www.malwarepatrol.net; fid:89092; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://malabadv.com.br/img"; reference:url,www.malwarepatrol.net; fid:91693; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://manifesto.sakura.ne.jp/xoops/extras/theme_x2t"; reference:url,www.malwarepatrol.net; fid:58014; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://meinv.tv"; reference:url,www.malwarepatrol.net; fid:136290; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://meloadriana6672.com/gZDG0Hz0es"; reference:url,www.malwarepatrol.net; fid:159581; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://members.multimania.co.uk/lovealmoot"; reference:url,www.malwarepatrol.net; fid:158406; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://members.multimania.co.uk/q82000"; reference:url,www.malwarepatrol.net; fid:145955; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://mensagensbols.pochta.ru"; reference:url,www.malwarepatrol.net; fid:145160; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://mice.iti.org.tw/img/98micejob"; reference:url,www.malwarepatrol.net; fid:123433; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://microsoft2008.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:100122; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://microsoftup.fileave.com"; reference:url,www.malwarepatrol.net; fid:136971; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://microvaccine.net/app/install"; reference:url,www.malwarepatrol.net; fid:119040; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://milakowo.ofm.pl"; reference:url,www.malwarepatrol.net; fid:97464; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://mnogophoto.com"; reference:url,www.malwarepatrol.net; fid:143136; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://modelspacekids.com/banner/banner"; reference:url,www.malwarepatrol.net; fid:147864; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://modrite.info/ks"; reference:url,www.malwarepatrol.net; fid:146002; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://mogulskiing.org"; reference:url,www.malwarepatrol.net; fid:136293; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://moileq.cn"; reference:url,www.malwarepatrol.net; fid:142672; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://moneysave.co.kr/program"; reference:url,www.malwarepatrol.net; fid:154316; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://movierapid.com"; reference:url,www.malwarepatrol.net; fid:158690; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://msdzssd.co.cc/v2/out"; reference:url,www.malwarepatrol.net; fid:159394; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://mtserver.com/vitb"; reference:url,www.malwarepatrol.net; fid:121373; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://multprint.narod.ru"; reference:url,www.malwarepatrol.net; fid:158408; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://mykaksosat.info"; reference:url,www.malwarepatrol.net; fid:159585; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://mynaplesflcondo.com"; reference:url,www.malwarepatrol.net; fid:88214; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://mysticfamiliar.com/mystic_market/public_html/shop/extrafiles"; reference:url,www.malwarepatrol.net; fid:158773; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://myud.jiakao.net.cn"; reference:url,www.malwarepatrol.net; fid:129426; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://nanosolutionssoft.com/rd/plugin"; reference:url,www.malwarepatrol.net; fid:159587; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://natal90090.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:99657; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://natalcartao0014amigo.do.sapo.pt"; reference:url,www.malwarepatrol.net; fid:101749; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://navigable446.info/k4"; reference:url,www.malwarepatrol.net; fid:157923; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://nc3comcn.vip137.2hezu.net/choujin"; reference:url,www.malwarepatrol.net; fid:149922; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://netsharingsite.com/downloads"; reference:url,www.malwarepatrol.net; fid:151016; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://new.free-link.co.kr/down2"; reference:url,www.malwarepatrol.net; fid:140688; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://newkaksosat.info"; reference:url,www.malwarepatrol.net; fid:159588; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://nicefilmsa.ru/0000"; reference:url,www.malwarepatrol.net; fid:159196; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://nikavi.100free.com/download"; reference:url,www.malwarepatrol.net; fid:135223; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://nnee.info/k4"; reference:url,www.malwarepatrol.net; fid:157929; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://noiyes.byus.net/img"; reference:url,www.malwarepatrol.net; fid:92990; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://novato.pochta.com/images"; reference:url,www.malwarepatrol.net; fid:158870; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://novidade.hotmail.ru/flashcard"; reference:url,www.malwarepatrol.net; fid:116615; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://novidadesglobais.com.br"; reference:url,www.malwarepatrol.net; fid:154829; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ns.ipp.com.ru/ms"; reference:url,www.malwarepatrol.net; fid:146765; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://o0o0il1i0o.9bic.net/Down/ext"; reference:url,www.malwarepatrol.net; fid:158871; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://o0o0il1i0o.9bic.net/Down/ext2"; reference:url,www.malwarepatrol.net; fid:158872; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://olre.co.kr/fs_song/setup/204"; reference:url,www.malwarepatrol.net; fid:148743; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://om108.com/images"; reference:url,www.malwarepatrol.net; fid:115667; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://omural.do.sapo.pt"; reference:url,www.malwarepatrol.net; fid:108757; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ontariol.ipower.com"; reference:url,www.malwarepatrol.net; fid:132945; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://opendrive.com"; reference:url,www.malwarepatrol.net; fid:144572; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://operador.fileave.com"; reference:url,www.malwarepatrol.net; fid:140025; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://optro.co.kr/img"; reference:url,www.malwarepatrol.net; fid:64202; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://orkut.schtuff.com"; reference:url,www.malwarepatrol.net; fid:18009; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://p1ay.cv81.com"; reference:url,www.malwarepatrol.net; fid:150471; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://pabarisparadise.com//plugins/system/rokbox/themes"; reference:url,www.malwarepatrol.net; fid:156516; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://parabuscar.powweb.com/files"; reference:url,www.malwarepatrol.net; fid:158282; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://parksmedia.co.kr/mallcash_config"; reference:url,www.malwarepatrol.net; fid:149373; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://parksmedia.co.kr/shopenuri"; reference:url,www.malwarepatrol.net; fid:138511; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://pcsweeper.co.kr/pgm"; reference:url,www.malwarepatrol.net; fid:140916; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://pds17.egloos.com/pds/201002/11/66"; reference:url,www.malwarepatrol.net; fid:138181; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://pds19.egloos.com/pds/201005/29/05"; reference:url,www.malwarepatrol.net; fid:149374; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://pds19.egloos.com/pds/201006/14/05"; reference:url,www.malwarepatrol.net; fid:157246; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perqafohu.com/~armendibx/oki"; reference:url,www.malwarepatrol.net; fid:41721; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/2006downloads"; reference:url,www.malwarepatrol.net; fid:25157; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/amar1254"; reference:url,www.malwarepatrol.net; fid:31684; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/amor_carinho"; reference:url,www.malwarepatrol.net; fid:29438; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/amorlinkshoo"; reference:url,www.malwarepatrol.net; fid:27193; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/baixe1"; reference:url,www.malwarepatrol.net; fid:28509; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/bfghd"; reference:url,www.malwarepatrol.net; fid:33795; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/brinde"; reference:url,www.malwarepatrol.net; fid:31914; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/cartaouol"; reference:url,www.malwarepatrol.net; fid:27482; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/centraldevoz/Concursospublicos"; reference:url,www.malwarepatrol.net; fid:29536; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/collectionsgreen"; reference:url,www.malwarepatrol.net; fid:24478; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/coracaanimado"; reference:url,www.malwarepatrol.net; fid:34117; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/denguemax"; reference:url,www.malwarepatrol.net; fid:28927; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/donwloadph"; reference:url,www.malwarepatrol.net; fid:27579; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/donwloadph1"; reference:url,www.malwarepatrol.net; fid:29020; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/donwloadph2"; reference:url,www.malwarepatrol.net; fid:29230; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/fbhyt5"; reference:url,www.malwarepatrol.net; fid:32067; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/fhotoblog2006"; reference:url,www.malwarepatrol.net; fid:25701; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/fotosrafael2"; reference:url,www.malwarepatrol.net; fid:25647; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/h0ly19"; reference:url,www.malwarepatrol.net; fid:28806; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/jghutnx2"; reference:url,www.malwarepatrol.net; fid:31793; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/jsgauy1"; reference:url,www.malwarepatrol.net; fid:32063; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/kitemail00111"; reference:url,www.malwarepatrol.net; fid:29546; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/linkmsn"; reference:url,www.malwarepatrol.net; fid:31050; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/linkmsn/link"; reference:url,www.malwarepatrol.net; fid:30932; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/links_es_br0031"; reference:url,www.malwarepatrol.net; fid:26616; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/lookbar"; reference:url,www.malwarepatrol.net; fid:27391; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/masterconfid"; reference:url,www.malwarepatrol.net; fid:29885; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/minhafoto"; reference:url,www.malwarepatrol.net; fid:25559; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/musicalcard"; reference:url,www.malwarepatrol.net; fid:28800; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/ocmnetcg"; reference:url,www.malwarepatrol.net; fid:30381; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/paulo1254"; reference:url,www.malwarepatrol.net; fid:31519; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/pendencias/vivopendencias"; reference:url,www.malwarepatrol.net; fid:26680; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/playboy2006"; reference:url,www.malwarepatrol.net; fid:26659; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/provedoresbrasil"; reference:url,www.malwarepatrol.net; fid:29590; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/receita_federal"; reference:url,www.malwarepatrol.net; fid:26451; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/sinistros"; reference:url,www.malwarepatrol.net; fid:25819; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/skiter_vix"; reference:url,www.malwarepatrol.net; fid:31665; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/sofia1254"; reference:url,www.malwarepatrol.net; fid:31986; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/special2006"; reference:url,www.malwarepatrol.net; fid:27346; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/trbgd1"; reference:url,www.malwarepatrol.net; fid:31919; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/uol_video/esqueleto/dancarino/873_4198_wmv"; reference:url,www.malwarepatrol.net; fid:31930; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/webterra"; reference:url,www.malwarepatrol.net; fid:30767; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://perso.wanadoo.es/zprollink0987"; reference:url,www.malwarepatrol.net; fid:28463; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://peypal.paginas.sapo.pt"; reference:url,www.malwarepatrol.net; fid:93694; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://photosharea.ru"; reference:url,www.malwarepatrol.net; fid:143542; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://pinkeve.com/_vti_txt"; reference:url,www.malwarepatrol.net; fid:92303; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://play.cv81.com"; reference:url,www.malwarepatrol.net; fid:144811; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://play.mediainstaller.com/h4"; reference:url,www.malwarepatrol.net; fid:156021; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://play.mediainstaller.com/jaya4"; reference:url,www.malwarepatrol.net; fid:156022; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://playsong.mediasongplayer.com/a4"; reference:url,www.malwarepatrol.net; fid:154835; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://playsong.mediasongplayer.com/baidx444a"; reference:url,www.malwarepatrol.net; fid:149948; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://playsong.mediasongplayer.com/baidx444ana"; reference:url,www.malwarepatrol.net; fid:149904; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://playsong.mediasongplayer.com/paidx333a"; reference:url,www.malwarepatrol.net; fid:153100; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://playsong.mediasongplayer.com/paidx444a"; reference:url,www.malwarepatrol.net; fid:151793; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://playsong.mediasongplayer.com/paidx444ana"; reference:url,www.malwarepatrol.net; fid:151794; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://plog3.1195.co.kr/download/floating"; reference:url,www.malwarepatrol.net; fid:157037; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://pointreward.kr/cashback/service"; reference:url,www.malwarepatrol.net; fid:146819; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://pointway.co.kr/Info/PointWayU"; reference:url,www.malwarepatrol.net; fid:104830; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://pop3.123fga.cn/ko"; reference:url,www.malwarepatrol.net; fid:123904; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://pops.jpoint.kr/pgm"; reference:url,www.malwarepatrol.net; fid:156395; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://porno-video-hunt.co.cc/movies"; reference:url,www.malwarepatrol.net; fid:156897; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://pornovideoo.info/new_aaa"; reference:url,www.malwarepatrol.net; fid:156940; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://pphui721.d23689.92kweb.com/pp"; reference:url,www.malwarepatrol.net; fid:159597; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://programas2010.pochta.com/images"; reference:url,www.malwarepatrol.net; fid:158411; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://propostaemktt.hotmail.ru"; reference:url,www.malwarepatrol.net; fid:145932; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://prospot.co.uk/images"; reference:url,www.malwarepatrol.net; fid:159598; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ps.1024tb.com/sc"; reference:url,www.malwarepatrol.net; fid:122210; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://psychologische-praxis-schuler.de/modules/FileManager/postlet/.work"; reference:url,www.malwarepatrol.net; fid:157208; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://qblog06.fileave.com"; reference:url,www.malwarepatrol.net; fid:126565; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://qd.netkill.com.cn"; reference:url,www.malwarepatrol.net; fid:154312; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://query.search-i.co.kr/other/handyway"; reference:url,www.malwarepatrol.net; fid:148802; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ra03.e2an.com"; reference:url,www.malwarepatrol.net; fid:150700; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ra03.e5732.com"; reference:url,www.malwarepatrol.net; fid:150122; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ra03.e5732.com/03"; reference:url,www.malwarepatrol.net; fid:147516; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ra03.t3ded.com"; reference:url,www.malwarepatrol.net; fid:154839; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://raianelessa.110mb.com"; reference:url,www.malwarepatrol.net; fid:101739; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rapafamily.com/index_files"; reference:url,www.malwarepatrol.net; fid:92867; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rapidhost.in/y/c"; reference:url,www.malwarepatrol.net; fid:159352; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rapidshare.com/files/322064920"; reference:url,www.malwarepatrol.net; fid:126411; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rapidshare.com/files/405550245"; reference:url,www.malwarepatrol.net; fid:151437; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rapidshare.com/files/406812055"; reference:url,www.malwarepatrol.net; fid:152657; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rapidshare.com/files/413979150"; reference:url,www.malwarepatrol.net; fid:158283; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rapidshare.com/files/414583511"; reference:url,www.malwarepatrol.net; fid:158285; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rapidshare.com/files/414589826"; reference:url,www.malwarepatrol.net; fid:158286; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rapidshare.com/files/414781647"; reference:url,www.malwarepatrol.net; fid:158566; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rapidshare.com/files/415090079"; reference:url,www.malwarepatrol.net; fid:158414; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rapidshare.com/files/415120355"; reference:url,www.malwarepatrol.net; fid:158415; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rapidshare.com/files/415262375"; reference:url,www.malwarepatrol.net; fid:158567; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rapidshare.com/files/415316460"; reference:url,www.malwarepatrol.net; fid:158884; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rapidshare.com/files/415338241"; reference:url,www.malwarepatrol.net; fid:158885; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rapidupload.com"; reference:url,www.malwarepatrol.net; fid:6393; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rapitim.ra.funpic.de"; reference:url,www.malwarepatrol.net; fid:133358; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rc04.t2w4r.com"; reference:url,www.malwarepatrol.net; fid:153567; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rc04.t2w4r.com/04"; reference:url,www.malwarepatrol.net; fid:153288; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://re05.t2w4r.com"; reference:url,www.malwarepatrol.net; fid:154547; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://re05.t2w4r.com/05"; reference:url,www.malwarepatrol.net; fid:153295; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://reward.gaz.co.kr/file/install2"; reference:url,www.malwarepatrol.net; fid:144330; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://reward.pnshop.co.kr/update_ps1003"; reference:url,www.malwarepatrol.net; fid:139475; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://reward.rewardpot.co.kr/update_rp1008"; reference:url,www.malwarepatrol.net; fid:123566; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://riveira.com/asociacions/xuventu_aguino"; reference:url,www.malwarepatrol.net; fid:147886; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://riveira.com/cursosinformatica/entrada"; reference:url,www.malwarepatrol.net; fid:148071; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://riveira.com/demo/doc"; reference:url,www.malwarepatrol.net; fid:148978; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rj07.e2dx.com"; reference:url,www.malwarepatrol.net; fid:152020; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rj07.e6532.com"; reference:url,www.malwarepatrol.net; fid:149157; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rj07.e6532.com/07"; reference:url,www.malwarepatrol.net; fid:149158; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rj07.t2w4r.com"; reference:url,www.malwarepatrol.net; fid:155696; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rm08.e2an.com"; reference:url,www.malwarepatrol.net; fid:151021; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rm08.e4562.com"; reference:url,www.malwarepatrol.net; fid:148816; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rmadan.info"; reference:url,www.malwarepatrol.net; fid:159035; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rmo8.e4271.com"; reference:url,www.malwarepatrol.net; fid:148537; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rmo8.e4271.com/08"; reference:url,www.malwarepatrol.net; fid:148536; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rodream.org/files/thparty/shopenuri"; reference:url,www.malwarepatrol.net; fid:138515; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://roladof.ro.funpic.org"; reference:url,www.malwarepatrol.net; fid:145175; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://root.denirulz.org/~denirulz/xd"; reference:url,www.malwarepatrol.net; fid:157790; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://roybjorge.com/arty"; reference:url,www.malwarepatrol.net; fid:150176; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rrrekti.ru/manager/mssql"; reference:url,www.malwarepatrol.net; fid:158199; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs123l32.rapidshare.com/files/329963447"; reference:url,www.malwarepatrol.net; fid:126697; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs171tg.rapidshare.com/files/329018051"; reference:url,www.malwarepatrol.net; fid:126698; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs203l33.rapidshare.com/files/327264483"; reference:url,www.malwarepatrol.net; fid:129179; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs234l3.rapidshare.com/files/322064925"; reference:url,www.malwarepatrol.net; fid:126227; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs30cg.rapidshare.com/files/326923765"; reference:url,www.malwarepatrol.net; fid:129180; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs30l32.rapidshare.com/files/326923765"; reference:url,www.malwarepatrol.net; fid:129271; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs3tl2.rapidshare.com/files/405598163"; reference:url,www.malwarepatrol.net; fid:151450; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs425cg.rapidshare.com/files/340593465"; reference:url,www.malwarepatrol.net; fid:128130; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs425l34.rapidshare.com/files/340593465"; reference:url,www.malwarepatrol.net; fid:128132; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs425tg.rapidshare.com/files/340593465"; reference:url,www.malwarepatrol.net; fid:128137; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs476l32.rapidshare.com/files/414583511"; reference:url,www.malwarepatrol.net; fid:158287; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs505l33.rapidshare.com/files/415262375"; reference:url,www.malwarepatrol.net; fid:158568; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs556l33.rapidshare.com/files/405550245"; reference:url,www.malwarepatrol.net; fid:150780; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs607l3.rapidshare.com/files/323974481"; reference:url,www.malwarepatrol.net; fid:128699; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs61l3.rapidshare.com/files/414681371"; reference:url,www.malwarepatrol.net; fid:158569; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs632l32.rapidshare.com/files/415316460"; reference:url,www.malwarepatrol.net; fid:158886; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs632l34.rapidshare.com/files/415316460"; reference:url,www.malwarepatrol.net; fid:159036; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs685tl.rapidshare.com/files/320561428"; reference:url,www.malwarepatrol.net; fid:126020; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs710tl3.rapidshare.com/files/320562328"; reference:url,www.malwarepatrol.net; fid:126021; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs736l3.rapidshare.com/files/415120355"; reference:url,www.malwarepatrol.net; fid:158570; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs736l32.rapidshare.com/files/415120355"; reference:url,www.malwarepatrol.net; fid:158416; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs750tl3.rapidshare.com/files/414589826"; reference:url,www.malwarepatrol.net; fid:158288; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs791l32.rapidshare.com/files/415090079"; reference:url,www.malwarepatrol.net; fid:158417; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs816l34.rapidshare.com/files/415338241"; reference:url,www.malwarepatrol.net; fid:158887; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs852l35.rapidshare.com/files/357978337"; reference:url,www.malwarepatrol.net; fid:137807; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs879l32.rapidshare.com/files/413493328"; reference:url,www.malwarepatrol.net; fid:157791; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rs917l3.rapidshare.com/files/413979150"; reference:url,www.malwarepatrol.net; fid:158291; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rt10.e4271.com"; reference:url,www.malwarepatrol.net; fid:148822; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rt10.t3egc.com"; reference:url,www.malwarepatrol.net; fid:158749; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rt10.t3egc.com/10"; reference:url,www.malwarepatrol.net; fid:153574; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rx11.e2dx.com"; reference:url,www.malwarepatrol.net; fid:150717; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rx11.e2dx.com/11"; reference:url,www.malwarepatrol.net; fid:150752; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rx11.e6532.com"; reference:url,www.malwarepatrol.net; fid:149164; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rx11.t2w4r.com"; reference:url,www.malwarepatrol.net; fid:154555; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rz12.e2gh.com"; reference:url,www.malwarepatrol.net; fid:150724; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rz12.e2gh.com/12"; reference:url,www.malwarepatrol.net; fid:150723; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rz12.e6805.com"; reference:url,www.malwarepatrol.net; fid:148823; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rz12.e6805.com/12"; reference:url,www.malwarepatrol.net; fid:148543; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://rz12.t12hg.com"; reference:url,www.malwarepatrol.net; fid:153308; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sa13.e2gh.com"; reference:url,www.malwarepatrol.net; fid:151028; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sa13.e6532.com/13"; reference:url,www.malwarepatrol.net; fid:148289; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sa13.t12hg.com"; reference:url,www.malwarepatrol.net; fid:156260; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://safer-scan.com"; reference:url,www.malwarepatrol.net; fid:123564; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://salem455.fileave.com"; reference:url,www.malwarepatrol.net; fid:141669; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sanhak.kimpo.ac.kr/hosting/group/authorize/resource"; reference:url,www.malwarepatrol.net; fid:127246; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sc14.e6532.com/14"; reference:url,www.malwarepatrol.net; fid:148544; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://scripts.dlv4.com/binaries/IA"; reference:url,www.malwarepatrol.net; fid:33479; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://scripts.dlv4.com/binaries/egaccess4"; reference:url,www.malwarepatrol.net; fid:52496; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://se15.e2km.com"; reference:url,www.malwarepatrol.net; fid:151050; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://se15.t15jk.com"; reference:url,www.malwarepatrol.net; fid:153316; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://search.abrows.com/Update/A_P_SB_windowspack002_5"; reference:url,www.malwarepatrol.net; fid:143961; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://search.sidegreen.com/update/SG03"; reference:url,www.malwarepatrol.net; fid:143484; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sefergtrserfv.ru/php"; reference:url,www.malwarepatrol.net; fid:158922; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://seti.sentry.net/archive/bioastro/2003/Feb/att-0025"; reference:url,www.malwarepatrol.net; fid:37130; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sex123.web.fc2.com"; reference:url,www.malwarepatrol.net; fid:156136; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sf244.f1.com.tw/test"; reference:url,www.malwarepatrol.net; fid:91549; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sh16.e2km.com"; reference:url,www.malwarepatrol.net; fid:153318; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sh16.t15jk.com"; reference:url,www.malwarepatrol.net; fid:153321; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sh16.t15jk.com/16"; reference:url,www.malwarepatrol.net; fid:154559; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://shopptime.do.sapo.pt"; reference:url,www.malwarepatrol.net; fid:89808; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://showcam.100free.com"; reference:url,www.malwarepatrol.net; fid:153323; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sidehelp.co.kr/App"; reference:url,www.malwarepatrol.net; fid:155703; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sidehelp.co.kr/SHelp2/AFP"; reference:url,www.malwarepatrol.net; fid:143870; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://silwana.info"; reference:url,www.malwarepatrol.net; fid:157346; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://site.mynet.com/dwusb"; reference:url,www.malwarepatrol.net; fid:140947; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sitekeyrox3casa.front.ru"; reference:url,www.malwarepatrol.net; fid:154560; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sites.google.com/site/tangkakgang007"; reference:url,www.malwarepatrol.net; fid:141412; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://skiplan.pro/php"; reference:url,www.malwarepatrol.net; fid:144342; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://slotch.com/ist/softwares/bundlers"; reference:url,www.malwarepatrol.net; fid:114387; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://slotch.com/ist/softwares/v4.0"; reference:url,www.malwarepatrol.net; fid:114389; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sm18.t3e4t.com"; reference:url,www.malwarepatrol.net; fid:156027; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sms1000.co.kr/App/main/neo"; reference:url,www.malwarepatrol.net; fid:150299; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://soek152.dothome.co.kr"; reference:url,www.malwarepatrol.net; fid:159040; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://somerhaven.com/images"; reference:url,www.malwarepatrol.net; fid:126183; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sp19.t3e4t.com"; reference:url,www.malwarepatrol.net; fid:156036; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://space.cachefly.net/5457702"; reference:url,www.malwarepatrol.net; fid:156037; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://spacurriculum.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:104455; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://spainfoodandwine.com"; reference:url,www.malwarepatrol.net; fid:156108; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://spamnuker.com/product/camp/clickbank"; reference:url,www.malwarepatrol.net; fid:114406; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sprottcareers.com/businessclass"; reference:url,www.malwarepatrol.net; fid:156431; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://spycar.org/Spycar_files"; reference:url,www.malwarepatrol.net; fid:143549; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sssq8.thewomanizer.net"; reference:url,www.malwarepatrol.net; fid:153324; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://staff.forumfree.net/script/old"; reference:url,www.malwarepatrol.net; fid:155265; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://stashbox.org/950311"; reference:url,www.malwarepatrol.net; fid:151804; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://subpoena6868.info/p7"; reference:url,www.malwarepatrol.net; fid:155163; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://supercarr.com"; reference:url,www.malwarepatrol.net; fid:147553; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://survdata.com/dev"; reference:url,www.malwarepatrol.net; fid:155435; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sver.googlecode.com/files"; reference:url,www.malwarepatrol.net; fid:157341; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://svyato.net/engine"; reference:url,www.malwarepatrol.net; fid:159606; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://sx21.t3e4t.com"; reference:url,www.malwarepatrol.net; fid:154570; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://tangkakgang007.googlepages.com"; reference:url,www.malwarepatrol.net; fid:141479; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://tbcode.com/ist/softwares/v4.0"; reference:url,www.malwarepatrol.net; fid:114424; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://tcnet02.is-the-boss.com"; reference:url,www.malwarepatrol.net; fid:142150; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://tco03.is-the-boss.com"; reference:url,www.malwarepatrol.net; fid:141672; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://teainside.net"; reference:url,www.malwarepatrol.net; fid:158062; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://telegramaonline09.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:103260; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://templeofshalom.com"; reference:url,www.malwarepatrol.net; fid:149786; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://terious.co.kr/script/data"; reference:url,www.malwarepatrol.net; fid:75266; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://tete666.fileave.com"; reference:url,www.malwarepatrol.net; fid:129192; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://thefinmodel.com/news"; reference:url,www.malwarepatrol.net; fid:158787; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://theinternetdad.com"; reference:url,www.malwarepatrol.net; fid:136564; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://thekaksosat.info"; reference:url,www.malwarepatrol.net; fid:158640; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://tibiabot.unl.pl/acab"; reference:url,www.malwarepatrol.net; fid:159609; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://tibiafriko.republika.pl"; reference:url,www.malwarepatrol.net; fid:123562; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://tjkd.info/k4"; reference:url,www.malwarepatrol.net; fid:157927; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://tksfc.net/data/member"; reference:url,www.malwarepatrol.net; fid:151058; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://top-teen-porn.info"; reference:url,www.malwarepatrol.net; fid:156038; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://torpedovivosms.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:97685; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://toxicfree.ssht.kr/ToxicFree"; reference:url,www.malwarepatrol.net; fid:158466; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://trasportadorasiqueir.pochta.ru/images"; reference:url,www.malwarepatrol.net; fid:157214; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://tscursosinsp.com.br/images"; reference:url,www.malwarepatrol.net; fid:156040; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://tsghdoom.fileave.com"; reference:url,www.malwarepatrol.net; fid:138703; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://tubeflash.mooo.com/getfile42544"; reference:url,www.malwarepatrol.net; fid:140962; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://tuzeremlaksigorta.com"; reference:url,www.malwarepatrol.net; fid:153342; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://u.987255.com/image"; reference:url,www.malwarepatrol.net; fid:159285; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://u.s3t5n.com/rx11"; reference:url,www.malwarepatrol.net; fid:152674; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://u.w3d2r.com/vh26"; reference:url,www.malwarepatrol.net; fid:159612; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://u2168cn.3013.cn/backup"; reference:url,www.malwarepatrol.net; fid:129482; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://u3ex.com"; reference:url,www.malwarepatrol.net; fid:156133; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://u7.minisearch.co.kr/Update49"; reference:url,www.malwarepatrol.net; fid:155052; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ujkdiuejdk.com"; reference:url,www.malwarepatrol.net; fid:159050; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ukms.tucows.com/files5"; reference:url,www.malwarepatrol.net; fid:152676; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://umbrella.uz.ua/Vumb"; reference:url,www.malwarepatrol.net; fid:145205; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ungente01.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:102516; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://unionfile.com"; reference:url,www.malwarepatrol.net; fid:159613; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://unrestrictedownloads.com/V3/downloads"; reference:url,www.malwarepatrol.net; fid:133794; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up.5136688.com"; reference:url,www.malwarepatrol.net; fid:153591; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up.enpop.net"; reference:url,www.malwarepatrol.net; fid:155050; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up.enterpop.co.kr"; reference:url,www.malwarepatrol.net; fid:145653; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up.secure-file.net/uploads"; reference:url,www.malwarepatrol.net; fid:152677; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.adstop.co.kr/Install/adstop/pid/ins/adstop01"; reference:url,www.malwarepatrol.net; fid:147555; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.dbclean.co.kr/Install/dbclean/pid/nate/nate1"; reference:url,www.malwarepatrol.net; fid:157273; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.free-sms.co.kr/main/music"; reference:url,www.malwarepatrol.net; fid:156732; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.free-sms.co.kr/upapp/free02"; reference:url,www.malwarepatrol.net; fid:136427; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.free-sms.co.kr/upapp/free03"; reference:url,www.malwarepatrol.net; fid:136428; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.give2sms.com/App/upapp/give14"; reference:url,www.malwarepatrol.net; fid:147753; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.give2sms.com/App/upapp/give15"; reference:url,www.malwarepatrol.net; fid:136247; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.hardclean.net/Install/hardclean/pid/nate"; reference:url,www.malwarepatrol.net; fid:132968; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.smart119.co.kr/download/Install/smart119/pid/smart05"; reference:url,www.malwarepatrol.net; fid:138709; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.sms1000.co.kr/App/main/filepop"; reference:url,www.malwarepatrol.net; fid:154588; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.sms1000.co.kr/App/main/neo"; reference:url,www.malwarepatrol.net; fid:150310; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.sms1000.co.kr/App/main/popin3"; reference:url,www.malwarepatrol.net; fid:153596; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.sms1000.co.kr/App/main/s01"; reference:url,www.malwarepatrol.net; fid:143631; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.sms1000.co.kr/App/main/s02"; reference:url,www.malwarepatrol.net; fid:139826; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.sms1000.co.kr/App/main/s03"; reference:url,www.malwarepatrol.net; fid:143748; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.sms1000.co.kr/App/main/s05"; reference:url,www.malwarepatrol.net; fid:155334; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.sms1000.co.kr/App/main/webmain"; reference:url,www.malwarepatrol.net; fid:151479; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.vvaccine.co.kr/Install/vvaccine/pid/ins/vvcins01"; reference:url,www.malwarepatrol.net; fid:136250; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.vvaccine.co.kr/Install/vvaccine/pid/ins/vvcins02"; reference:url,www.malwarepatrol.net; fid:145215; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.zeroclean.co.kr/Install/zeroclean/pid/is/is1"; reference:url,www.malwarepatrol.net; fid:153597; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.zeroclean.co.kr/Install/zeroclean/pid/nate/nate1"; reference:url,www.malwarepatrol.net; fid:140969; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://up1.zeroclean.co.kr/Install/zeroclean/pid/nate/nate10"; reference:url,www.malwarepatrol.net; fid:154594; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://update.115.la"; reference:url,www.malwarepatrol.net; fid:152678; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://update.51edm.net"; reference:url,www.malwarepatrol.net; fid:84990; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://update.bindns.cn/2.0"; reference:url,www.malwarepatrol.net; fid:129436; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://update.enprivacy.com/setupa"; reference:url,www.malwarepatrol.net; fid:151813; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://update.greenvaccine.co.kr/setupa"; reference:url,www.malwarepatrol.net; fid:156120; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://update.myinfoguard.co.kr"; reference:url,www.malwarepatrol.net; fid:143241; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://update.mypcguard.co.kr"; reference:url,www.malwarepatrol.net; fid:141685; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://update.onescan.co.kr/setupa"; reference:url,www.malwarepatrol.net; fid:155268; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://update.pctrouble.co.kr/bin"; reference:url,www.malwarepatrol.net; fid:152687; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://update.pctrouble.co.kr/setupa"; reference:url,www.malwarepatrol.net; fid:154981; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://update.resetinfo.co.kr/setupa"; reference:url,www.malwarepatrol.net; fid:156267; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://update.solyak.co.kr"; reference:url,www.malwarepatrol.net; fid:142932; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://update.widelink.kr/pid"; reference:url,www.malwarepatrol.net; fid:145473; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://update1.coffeebook.co.kr/MyLibrary/Update"; reference:url,www.malwarepatrol.net; fid:121782; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://update2.coffeebook.co.kr/MyLibrary/Update"; reference:url,www.malwarepatrol.net; fid:121783; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://updator.funtvi.kr"; reference:url,www.malwarepatrol.net; fid:139804; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://upgrade.spacequery.com/download/spacequery/1_38"; reference:url,www.malwarepatrol.net; fid:149895; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://upgrade.tabdiscover.com/download/tabdiscover/1_4"; reference:url,www.malwarepatrol.net; fid:149886; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://upgrade.zwankysearch.com/download/zwankysearch/1_4"; reference:url,www.malwarepatrol.net; fid:149930; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://uploaad.100free.com"; reference:url,www.malwarepatrol.net; fid:141201; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://uploaad.is-the-boss.com"; reference:url,www.malwarepatrol.net; fid:131490; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://upload.wshells.ws"; reference:url,www.malwarepatrol.net; fid:145630; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://uploaded.100free.com"; reference:url,www.malwarepatrol.net; fid:141202; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://urodinam.net"; reference:url,www.malwarepatrol.net; fid:135216; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://usaover.us"; reference:url,www.malwarepatrol.net; fid:158642; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://utorrent.su/download"; reference:url,www.malwarepatrol.net; fid:152931; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://vaccinezero.co.kr/version/bin"; reference:url,www.malwarepatrol.net; fid:104326; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://vaidarcerto.pochta.ru"; reference:url,www.malwarepatrol.net; fid:153353; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://valeriasaraiva.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:99299; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://van15032006.googlepages.com"; reference:url,www.malwarepatrol.net; fid:48048; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ve25.t3e4t.com/25"; reference:url,www.malwarepatrol.net; fid:159622; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://vejanovo1.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:40453; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ventrilo312.yoyo.pl/download.php"; reference:url,www.malwarepatrol.net; fid:127401; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://verter2010.real-host.ru/index"; reference:url,www.malwarepatrol.net; fid:158229; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://vertudoagora.tempsite.ws/ver"; reference:url,www.malwarepatrol.net; fid:154863; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://vh26.t3e4t.com"; reference:url,www.malwarepatrol.net; fid:154867; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://vh26.t3e4t.com/26"; reference:url,www.malwarepatrol.net; fid:154864; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://vidaboa2009.pochta.ru"; reference:url,www.malwarepatrol.net; fid:152692; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://vidoshop.info/new_aaa"; reference:url,www.malwarepatrol.net; fid:157193; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://viewbestads.com/public/tiny_mce"; reference:url,www.malwarepatrol.net; fid:140056; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://vipcardsnatal01.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:99856; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://vipterracards.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:101745; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://virusbye.net/app/install"; reference:url,www.malwarepatrol.net; fid:113877; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://visapremiumcartoes.pochta.ru"; reference:url,www.malwarepatrol.net; fid:155421; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://visualizarrcartoes.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:103301; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://vivotorpedofotos.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:94893; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://vivotorpedos.110mb.com"; reference:url,www.malwarepatrol.net; fid:102083; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://vivotorpedos.web.googlepages.com"; reference:url,www.malwarepatrol.net; fid:90019; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://vivotorpedoweb.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:102766; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://vj27.t3e4t.com"; reference:url,www.malwarepatrol.net; fid:153374; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://vj27.t3e4t.com/27"; reference:url,www.malwarepatrol.net; fid:153373; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://voraciousutre5.info/k4"; reference:url,www.malwarepatrol.net; fid:157925; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://voxcardis.paginas.sapo.pt"; reference:url,www.malwarepatrol.net; fid:89390; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://voxcardsmusical.home.sapo.pt"; reference:url,www.malwarepatrol.net; fid:35062; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://voxcardsoff.paginas.sapo.pt/cartoes"; reference:url,www.malwarepatrol.net; fid:37496; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://vulvapalooza.com/index-new_files"; reference:url,www.malwarepatrol.net; fid:138889; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://w.s2g5c.com/rz12"; reference:url,www.malwarepatrol.net; fid:151824; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://w1.s3f5h.com/ra03"; reference:url,www.malwarepatrol.net; fid:150748; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://w3.e4r5t.com/rt10"; reference:url,www.malwarepatrol.net; fid:150478; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://wahdohotel.nl/56n0fpf2"; reference:url,www.malwarepatrol.net; fid:158968; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://wax56.com/main/bin"; reference:url,www.malwarepatrol.net; fid:157838; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://wbrj2009.3322.org"; reference:url,www.malwarepatrol.net; fid:153600; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://wdwg.net"; reference:url,www.malwarepatrol.net; fid:155094; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://webfotosjpg.com.sapo.pt"; reference:url,www.malwarepatrol.net; fid:97884; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://webmensagem.110mb.com"; reference:url,www.malwarepatrol.net; fid:91053; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://webtorpedos.vivo.googlepages.com"; reference:url,www.malwarepatrol.net; fid:88676; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://werrrcorp.com/hhhjj/biin"; reference:url,www.malwarepatrol.net; fid:153664; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://wewant14chatsk.info"; reference:url,www.malwarepatrol.net; fid:156727; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://wh1t3w1d0w5.fileave.com"; reference:url,www.malwarepatrol.net; fid:127226; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://whoisxxx.net"; reference:url,www.malwarepatrol.net; fid:156389; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://whynotyouah.fileave.com"; reference:url,www.malwarepatrol.net; fid:140059; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://windbh.hit.bg"; reference:url,www.malwarepatrol.net; fid:80411; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://winupdatedll.com"; reference:url,www.malwarepatrol.net; fid:155491; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://wm.z80.com.cn/down/bisu"; reference:url,www.malwarepatrol.net; fid:147913; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://wq.best88888.com/C"; reference:url,www.malwarepatrol.net; fid:159410; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.000cc.com/c"; reference:url,www.malwarepatrol.net; fid:150131; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.000cc.com/c/exfile"; reference:url,www.malwarepatrol.net; fid:158901; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.100du.info"; reference:url,www.malwarepatrol.net; fid:158432; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.134135.info"; reference:url,www.malwarepatrol.net; fid:158297; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.135136.info"; reference:url,www.malwarepatrol.net; fid:158902; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.1366.hk"; reference:url,www.malwarepatrol.net; fid:154619; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.139139.info"; reference:url,www.malwarepatrol.net; fid:158903; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.1st-movies.org"; reference:url,www.malwarepatrol.net; fid:139891; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.1st-movies.org/"; reference:url,www.malwarepatrol.net; fid:157310; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.21.wwvv.us/images/css/updates"; reference:url,www.malwarepatrol.net; fid:130174; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.22.wwvv.us/images/css/updates"; reference:url,www.malwarepatrol.net; fid:130175; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.22outs.com"; reference:url,www.malwarepatrol.net; fid:159633; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.236236.info"; reference:url,www.malwarepatrol.net; fid:158578; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.24.wwvv.us/images/css/updates"; reference:url,www.malwarepatrol.net; fid:130177; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.26.wwvv.us/images/css/updates"; reference:url,www.malwarepatrol.net; fid:130179; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.26pk.com"; reference:url,www.malwarepatrol.net; fid:155852; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.333820qqpw.info/q"; reference:url,www.malwarepatrol.net; fid:156056; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.3388pp.info"; reference:url,www.malwarepatrol.net; fid:157452; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.365ppp.cn/down/2010322"; reference:url,www.malwarepatrol.net; fid:140325; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.3gpkk.net/down"; reference:url,www.malwarepatrol.net; fid:144684; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.575mm.com/ma"; reference:url,www.malwarepatrol.net; fid:147568; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.5qbb.com"; reference:url,www.malwarepatrol.net; fid:155783; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.778219qs.info"; reference:url,www.malwarepatrol.net; fid:157804; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.7dnfwg.com/nb"; reference:url,www.malwarepatrol.net; fid:157806; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.92shaiya.cn"; reference:url,www.malwarepatrol.net; fid:141001; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.a2a.coop/cache/page"; reference:url,www.malwarepatrol.net; fid:154621; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.acacomercial.com.br/cp/Scripts/images/PlayCount/WhiteOdometer"; reference:url,www.malwarepatrol.net; fid:122990; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.acspvendasvarejoatac.com/Get/plugin"; reference:url,www.malwarepatrol.net; fid:159187; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.ad-zero.com/appinfo/control2/kpu1/file"; reference:url,www.malwarepatrol.net; fid:103163; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.adfc-ffm.de"; reference:url,www.malwarepatrol.net; fid:157430; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.adolix.com/download"; reference:url,www.malwarepatrol.net; fid:135304; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.adtrigger.net/file"; reference:url,www.malwarepatrol.net; fid:142157; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.adyes.info/men"; reference:url,www.malwarepatrol.net; fid:158434; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.afuzi.com//greybox"; reference:url,www.malwarepatrol.net; fid:138557; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.agrupacioneclipse.com.ar/imagenes"; reference:url,www.malwarepatrol.net; fid:145469; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.angloangle.net/.book"; reference:url,www.malwarepatrol.net; fid:34680; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.anqixuan.com/old_page"; reference:url,www.malwarepatrol.net; fid:83016; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.antada.lt/auto/auto/en"; reference:url,www.malwarepatrol.net; fid:157967; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.artdeli.co.kr/bbs/include"; reference:url,www.malwarepatrol.net; fid:32132; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.askyap.net"; reference:url,www.malwarepatrol.net; fid:143155; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.audio2convert.com/cda-converter/download"; reference:url,www.malwarepatrol.net; fid:148974; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.autoforexbody.com"; reference:url,www.malwarepatrol.net; fid:131688; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.baidu.cn.wwvv.us/images/css"; reference:url,www.malwarepatrol.net; fid:139807; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.benowns.com"; reference:url,www.malwarepatrol.net; fid:156064; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.besselaar.net/language"; reference:url,www.malwarepatrol.net; fid:156915; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.bioski.it/img/icons/tabs"; reference:url,www.malwarepatrol.net; fid:91488; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.bolichepiratininga.com.br/images"; reference:url,www.malwarepatrol.net; fid:93041; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.brasconnec.dominiotemporario.com"; reference:url,www.malwarepatrol.net; fid:159635; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.buzios.com.br/app/Fotos"; reference:url,www.malwarepatrol.net; fid:152727; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.calandreta-gaillac.fr/Association"; reference:url,www.malwarepatrol.net; fid:128901; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.caldosdelnorte.com/img/githelr"; reference:url,www.malwarepatrol.net; fid:92236; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.caneyvalleycorvetteclub.com/clients"; reference:url,www.malwarepatrol.net; fid:113993; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.casual.in.ua/catalogs"; reference:url,www.malwarepatrol.net; fid:158652; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.ccbacenter.org"; reference:url,www.malwarepatrol.net; fid:151593; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.cdcc.gov.cn/css"; reference:url,www.malwarepatrol.net; fid:157871; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.cepsaltda.cl/uc/codec"; reference:url,www.malwarepatrol.net; fid:150330; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.certainkey.com/demos/valiselight"; reference:url,www.malwarepatrol.net; fid:131364; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.checkonid.com/app"; reference:url,www.malwarepatrol.net; fid:123487; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.cikcik.com"; reference:url,www.malwarepatrol.net; fid:156105; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.cmc-de.com"; reference:url,www.malwarepatrol.net; fid:158583; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.cmoney.co.kr/reward/jdisk/file"; reference:url,www.malwarepatrol.net; fid:138531; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.cnhack.cn/soft/dw/t1"; reference:url,www.malwarepatrol.net; fid:145602; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.colforms.com/include/inc_ext/spaw/class"; reference:url,www.malwarepatrol.net; fid:122230; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.com-doumi.net/app/install"; reference:url,www.malwarepatrol.net; fid:135253; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.comanhiara.megabyet.net/novamba"; reference:url,www.malwarepatrol.net; fid:147920; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.commbooks.com"; reference:url,www.malwarepatrol.net; fid:137500; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.comme1gant.fr//components/com_user/models"; reference:url,www.malwarepatrol.net; fid:159291; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.copydvdcopy.net"; reference:url,www.malwarepatrol.net; fid:135468; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.corriedales.woolever.com."; reference:url,www.malwarepatrol.net; fid:158300; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.cu109.com/doit"; reference:url,www.malwarepatrol.net; fid:127563; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.cwnet.com"; reference:url,www.malwarepatrol.net; fid:138378; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.dadi518.com/images"; reference:url,www.malwarepatrol.net; fid:158517; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.dapurcokelat.com/css/.pro"; reference:url,www.malwarepatrol.net; fid:158196; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.dapurcokelat.com/images/banner/swf"; reference:url,www.malwarepatrol.net; fid:156916; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.darkwet.net/private"; reference:url,www.malwarepatrol.net; fid:151526; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.ddipro.com/freeware"; reference:url,www.malwarepatrol.net; fid:127434; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.definitiva.com.br/di"; reference:url,www.malwarepatrol.net; fid:147921; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.delicioushistory.com/pup"; reference:url,www.malwarepatrol.net; fid:150314; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.desktopsecuritysoft2010.com"; reference:url,www.malwarepatrol.net; fid:157184; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.diaoy.com/attachments/month_0909"; reference:url,www.malwarepatrol.net; fid:142698; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.dinastia.g12.br/knowledgeTree/skins/kts_blue/.svn/prop-base"; reference:url,www.malwarepatrol.net; fid:126752; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.do-housing.com/plugin"; reference:url,www.malwarepatrol.net; fid:124216; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.dowmii.megabyet.net"; reference:url,www.malwarepatrol.net; fid:148189; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.dvdrippers.org"; reference:url,www.malwarepatrol.net; fid:135475; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.easyenco.co.kr/infocon"; reference:url,www.malwarepatrol.net; fid:159642; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.ebmineranacional.net/portal_minera/images"; reference:url,www.malwarepatrol.net; fid:127963; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.egebet.com/eelite"; reference:url,www.malwarepatrol.net; fid:155786; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.elensoft.narod.ru/sstm"; reference:url,www.malwarepatrol.net; fid:140719; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.eroticnorthamerica.com/new//admin/config/options"; reference:url,www.malwarepatrol.net; fid:147923; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.euronicsit.com"; reference:url,www.malwarepatrol.net; fid:158441; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.euronicsit.com/dark"; reference:url,www.malwarepatrol.net; fid:152702; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.evaldoimoveis.com.br"; reference:url,www.malwarepatrol.net; fid:156500; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.facebook.povli.com"; reference:url,www.malwarepatrol.net; fid:156745; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.federsanitaancicalabria.it"; reference:url,www.malwarepatrol.net; fid:109558; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.feelfitnow.com/business/images/business/ch"; reference:url,www.malwarepatrol.net; fid:126526; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.feichangyemen.cn"; reference:url,www.malwarepatrol.net; fid:140721; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.feiyu68.com/exe"; reference:url,www.malwarepatrol.net; fid:156759; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.feiyu68.com/exe2"; reference:url,www.malwarepatrol.net; fid:157259; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.filesxfer.com"; reference:url,www.malwarepatrol.net; fid:7634; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.filesxfer.com/"; reference:url,www.malwarepatrol.net; fid:15724; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.fjgqw.com/soft"; reference:url,www.malwarepatrol.net; fid:156145; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.flvtomp3converter.com"; reference:url,www.malwarepatrol.net; fid:127619; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.folkorea.org/bbs/icon"; reference:url,www.malwarepatrol.net; fid:147591; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.foto-tabor.com/images/..."; reference:url,www.malwarepatrol.net; fid:144388; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.fotoskola.lv"; reference:url,www.malwarepatrol.net; fid:91276; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.foxcreek.cn"; reference:url,www.malwarepatrol.net; fid:159645; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.frauenhaus-emden.de/plugins"; reference:url,www.malwarepatrol.net; fid:158904; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.free-hoster.cc"; reference:url,www.malwarepatrol.net; fid:17946; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.freestuff4ever.info"; reference:url,www.malwarepatrol.net; fid:137219; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.freewebtown.com/a201006"; reference:url,www.malwarepatrol.net; fid:148985; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.freewebtown.com/alberto_gomes81/2"; reference:url,www.malwarepatrol.net; fid:159421; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.freewebtown.com/fabiocimnc"; reference:url,www.malwarepatrol.net; fid:153390; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.freewebtown.com/fotos2010jpg"; reference:url,www.malwarepatrol.net; fid:147924; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.freewebtown.com/hansk1"; reference:url,www.malwarepatrol.net; fid:148975; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.freewebtown.com/jose_arrantes/4"; reference:url,www.malwarepatrol.net; fid:159422; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.freewebtown.com/lafud"; reference:url,www.malwarepatrol.net; fid:150019; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.freewebtown.com/mandof"; reference:url,www.malwarepatrol.net; fid:149199; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.freewebtown.com/trolzinho"; reference:url,www.malwarepatrol.net; fid:158585; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.freewebtown.com/upload1000/.uplink"; reference:url,www.malwarepatrol.net; fid:156283; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gentelatina.net/web_isr"; reference:url,www.malwarepatrol.net; fid:158906; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.geopublic.biz/plaut/popup"; reference:url,www.malwarepatrol.net; fid:151836; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gfind.co.kr/basic/About"; reference:url,www.malwarepatrol.net; fid:157264; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.giandomenicolombardi.it/listing/exploit"; reference:url,www.malwarepatrol.net; fid:119650; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gibacht.com/images"; reference:url,www.malwarepatrol.net; fid:151640; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gnometools.com/releases"; reference:url,www.malwarepatrol.net; fid:139789; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gosu.net/ETBoard/Css"; reference:url,www.malwarepatrol.net; fid:141712; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/Ofuxico2"; reference:url,www.malwarepatrol.net; fid:28797; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/TSE_2006"; reference:url,www.malwarepatrol.net; fid:28936; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/amazonpass/images"; reference:url,www.malwarepatrol.net; fid:32038; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/amizade1010"; reference:url,www.malwarepatrol.net; fid:40302; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/amo02006"; reference:url,www.malwarepatrol.net; fid:25241; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/amor.meu"; reference:url,www.malwarepatrol.net; fid:30112; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/amor098/ouut/098/pgr/alt"; reference:url,www.malwarepatrol.net; fid:25569; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/amoreamizade"; reference:url,www.malwarepatrol.net; fid:41095; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/anatura1"; reference:url,www.malwarepatrol.net; fid:39540; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/antiirus"; reference:url,www.malwarepatrol.net; fid:31728; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/areasegura"; reference:url,www.malwarepatrol.net; fid:26575; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/bairelo09"; reference:url,www.malwarepatrol.net; fid:27877; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/baixaki"; reference:url,www.malwarepatrol.net; fid:38609; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/bankersp"; reference:url,www.malwarepatrol.net; fid:30849; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/barquinho.show"; reference:url,www.malwarepatrol.net; fid:38618; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/bbb_brasil_6/bbb"; reference:url,www.malwarepatrol.net; fid:54292; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/belemdopara/joelmabandacalypso"; reference:url,www.malwarepatrol.net; fid:28173; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/bihkl"; reference:url,www.malwarepatrol.net; fid:36743; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/blogcartao"; reference:url,www.malwarepatrol.net; fid:36822; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/blogmensagens"; reference:url,www.malwarepatrol.net; fid:37017; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/bonde2007/calor10"; reference:url,www.malwarepatrol.net; fid:28907; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/botic2006"; reference:url,www.malwarepatrol.net; fid:27295; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/boticario1"; reference:url,www.malwarepatrol.net; fid:39233; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/calipsojoelma/playboy"; reference:url,www.malwarepatrol.net; fid:27551; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/cancela20"; reference:url,www.malwarepatrol.net; fid:27671; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/cantaohana"; reference:url,www.malwarepatrol.net; fid:31245; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/card101"; reference:url,www.malwarepatrol.net; fid:26318; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/cardesgratis"; reference:url,www.malwarepatrol.net; fid:28202; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/carinho_amor1"; reference:url,www.malwarepatrol.net; fid:24875; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/carlaperez"; reference:url,www.malwarepatrol.net; fid:28940; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/carrtaoterraa"; reference:url,www.malwarepatrol.net; fid:28732; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/carst2563"; reference:url,www.malwarepatrol.net; fid:47866; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/cartaowebnovo"; reference:url,www.malwarepatrol.net; fid:41819; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/cartoesmira"; reference:url,www.malwarepatrol.net; fid:27696; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/ccartao"; reference:url,www.malwarepatrol.net; fid:24361; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/celo2007/livro"; reference:url,www.malwarepatrol.net; fid:28067; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/centralcardweb/TerraVOIP"; reference:url,www.malwarepatrol.net; fid:25768; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/centralvipmsn/MensagemVip"; reference:url,www.malwarepatrol.net; fid:27715; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/cleo987"; reference:url,www.malwarepatrol.net; fid:27594; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/comunicado083"; reference:url,www.malwarepatrol.net; fid:31998; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/conection06"; reference:url,www.malwarepatrol.net; fid:30364; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/copadomundo2006"; reference:url,www.malwarepatrol.net; fid:25098; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/copapromocao"; reference:url,www.malwarepatrol.net; fid:28531; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/cora2006"; reference:url,www.malwarepatrol.net; fid:24437; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/correcao"; reference:url,www.malwarepatrol.net; fid:26803; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/correcao/symantec"; reference:url,www.malwarepatrol.net; fid:26433; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/criancafeliz"; reference:url,www.malwarepatrol.net; fid:31452; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/curi2006"; reference:url,www.malwarepatrol.net; fid:24998; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/dominiofesthost/voxcards"; reference:url,www.malwarepatrol.net; fid:30517; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/doublecards"; reference:url,www.malwarepatrol.net; fid:37584; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/elite2006/config"; reference:url,www.malwarepatrol.net; fid:30761; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/email310700"; reference:url,www.malwarepatrol.net; fid:31634; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/endreco2006"; reference:url,www.malwarepatrol.net; fid:24573; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/eu.20"; reference:url,www.malwarepatrol.net; fid:26767; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/f0t0s001/FOTO/FOT/FO"; reference:url,www.malwarepatrol.net; fid:24980; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/faq_submarino"; reference:url,www.malwarepatrol.net; fid:25411; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/festa.do.beijo"; reference:url,www.malwarepatrol.net; fid:36037; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/flexfedex"; reference:url,www.malwarepatrol.net; fid:24744; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/flordeamor"; reference:url,www.malwarepatrol.net; fid:36585; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/fonemens"; reference:url,www.malwarepatrol.net; fid:28180; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/formulario012"; reference:url,www.malwarepatrol.net; fid:29910; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/fostosveridicas"; reference:url,www.malwarepatrol.net; fid:29411; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/foto.de.ferias"; reference:url,www.malwarepatrol.net; fid:38085; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/fotobook/minhasfotos"; reference:url,www.malwarepatrol.net; fid:26568; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/fotocelular"; reference:url,www.malwarepatrol.net; fid:25965; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/fotoflog/fotos"; reference:url,www.malwarepatrol.net; fid:52512; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/fotolognet"; reference:url,www.malwarepatrol.net; fid:29611; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/fotoperfil"; reference:url,www.malwarepatrol.net; fid:25748; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/fotosamanda"; reference:url,www.malwarepatrol.net; fid:38990; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/fotosgraciosas"; reference:url,www.malwarepatrol.net; fid:41973; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/fotosjoelma"; reference:url,www.malwarepatrol.net; fid:28019; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/fotostristes"; reference:url,www.malwarepatrol.net; fid:31555; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/fototerra"; reference:url,www.malwarepatrol.net; fid:38646; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/fottos2006"; reference:url,www.malwarepatrol.net; fid:29088; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/foxico"; reference:url,www.malwarepatrol.net; fid:37668; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/fragas"; reference:url,www.malwarepatrol.net; fid:29531; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/freeindex"; reference:url,www.malwarepatrol.net; fid:26725; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/ftos098/vip"; reference:url,www.malwarepatrol.net; fid:38041; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/fudendo/putaria"; reference:url,www.malwarepatrol.net; fid:28674; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/fusiveis"; reference:url,www.malwarepatrol.net; fid:40075; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/ganhemtdinheiro"; reference:url,www.malwarepatrol.net; fid:29650; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/gatalindamar"; reference:url,www.malwarepatrol.net; fid:29326; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/h0ly"; reference:url,www.malwarepatrol.net; fid:24144; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/haroldonego"; reference:url,www.malwarepatrol.net; fid:36038; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/hosteng"; reference:url,www.malwarepatrol.net; fid:37836; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/hostpage"; reference:url,www.malwarepatrol.net; fid:29413; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/hu3kl7272"; reference:url,www.malwarepatrol.net; fid:24682; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/ifonenetvoz"; reference:url,www.malwarepatrol.net; fid:27139; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/ifonenetvozvoz"; reference:url,www.malwarepatrol.net; fid:27716; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/imagusrt"; reference:url,www.malwarepatrol.net; fid:38604; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/indexxx"; reference:url,www.malwarepatrol.net; fid:29570; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/infoembratel21"; reference:url,www.malwarepatrol.net; fid:28061; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/irrfbr2006/irrf"; reference:url,www.malwarepatrol.net; fid:30054; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/juliana.paes6"; reference:url,www.malwarepatrol.net; fid:26471; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/juliana_paes0"; reference:url,www.malwarepatrol.net; fid:25622; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/julianapaes001"; reference:url,www.malwarepatrol.net; fid:27110; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/julianapaes002"; reference:url,www.malwarepatrol.net; fid:27112; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/julianapaes1"; reference:url,www.malwarepatrol.net; fid:27493; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/julianapaes2"; reference:url,www.malwarepatrol.net; fid:27494; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/juridica2006"; reference:url,www.malwarepatrol.net; fid:35658; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/kodak1"; reference:url,www.malwarepatrol.net; fid:39527; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/l0mbrad0ster"; reference:url,www.malwarepatrol.net; fid:27823; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/loucura/vip"; reference:url,www.malwarepatrol.net; fid:37832; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/lov.cards"; reference:url,www.malwarepatrol.net; fid:38617; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/lovnamorando"; reference:url,www.malwarepatrol.net; fid:24239; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/luzwebmaster"; reference:url,www.malwarepatrol.net; fid:25746; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/m.class123/vip"; reference:url,www.malwarepatrol.net; fid:37842; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/m2006"; reference:url,www.malwarepatrol.net; fid:29443; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/madrim.film"; reference:url,www.malwarepatrol.net; fid:29514; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/mamonas06"; reference:url,www.malwarepatrol.net; fid:25857; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/maozinha"; reference:url,www.malwarepatrol.net; fid:28490; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/marcia990"; reference:url,www.malwarepatrol.net; fid:49479; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/mari_2006"; reference:url,www.malwarepatrol.net; fid:28690; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/mataathhhhf"; reference:url,www.malwarepatrol.net; fid:27142; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/mediakl"; reference:url,www.malwarepatrol.net; fid:31697; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/mensageiro2006"; reference:url,www.malwarepatrol.net; fid:40258; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/mensagemcard"; reference:url,www.malwarepatrol.net; fid:40259; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/mensagens_de"; reference:url,www.malwarepatrol.net; fid:27507; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/messenger.8.0"; reference:url,www.malwarepatrol.net; fid:24721; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/messenger_8.0"; reference:url,www.malwarepatrol.net; fid:25620; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/minastontos10/fotos"; reference:url,www.malwarepatrol.net; fid:28292; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/msnbeta80"; reference:url,www.malwarepatrol.net; fid:24449; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/msncard3000/MensagemVip"; reference:url,www.malwarepatrol.net; fid:26693; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/muletinha"; reference:url,www.malwarepatrol.net; fid:53153; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/mundosexx"; reference:url,www.malwarepatrol.net; fid:28059; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/mundovip/cardsvip"; reference:url,www.malwarepatrol.net; fid:25752; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/musical__cards"; reference:url,www.malwarepatrol.net; fid:35717; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/musicalc"; reference:url,www.malwarepatrol.net; fid:25303; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/nemora"; reference:url,www.malwarepatrol.net; fid:26694; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/netvtkfree/VideoFoto"; reference:url,www.malwarepatrol.net; fid:26865; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/newss"; reference:url,www.malwarepatrol.net; fid:27855; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/nickfox"; reference:url,www.malwarepatrol.net; fid:30023; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/noticia182/noticias"; reference:url,www.malwarepatrol.net; fid:51706; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/nua2006"; reference:url,www.malwarepatrol.net; fid:27143; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/ofuxico07"; reference:url,www.malwarepatrol.net; fid:28890; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/okut.communiter"; reference:url,www.malwarepatrol.net; fid:37526; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/olhe"; reference:url,www.malwarepatrol.net; fid:28685; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/olheisso"; reference:url,www.malwarepatrol.net; fid:30201; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/opi2006"; reference:url,www.malwarepatrol.net; fid:27006; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/orkutbr"; reference:url,www.malwarepatrol.net; fid:25453; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/orkutcards"; reference:url,www.malwarepatrol.net; fid:49066; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/pa2006"; reference:url,www.malwarepatrol.net; fid:24944; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/para_um_amigo"; reference:url,www.malwarepatrol.net; fid:36901; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/parejo10"; reference:url,www.malwarepatrol.net; fid:35762; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/peope10a"; reference:url,www.malwarepatrol.net; fid:46440; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/profile1984"; reference:url,www.malwarepatrol.net; fid:52319; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/provimento"; reference:url,www.malwarepatrol.net; fid:36946; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/putycompo"; reference:url,www.malwarepatrol.net; fid:28649; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/queijo01"; reference:url,www.malwarepatrol.net; fid:80198; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/receitafederal1"; reference:url,www.malwarepatrol.net; fid:28501; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/rede.globo"; reference:url,www.malwarepatrol.net; fid:24246; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/registro2034"; reference:url,www.malwarepatrol.net; fid:35867; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/relatorio01/foto/fot/fo/load"; reference:url,www.malwarepatrol.net; fid:26500; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/resumo2005"; reference:url,www.malwarepatrol.net; fid:26079; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/rfortes/ecomer"; reference:url,www.malwarepatrol.net; fid:29607; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/ris2006"; reference:url,www.malwarepatrol.net; fid:28074; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/roberta2000"; reference:url,www.malwarepatrol.net; fid:28592; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/roberta2006"; reference:url,www.malwarepatrol.net; fid:30200; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/s2006"; reference:url,www.malwarepatrol.net; fid:27495; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/samara10"; reference:url,www.malwarepatrol.net; fid:29715; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/seletiva0012006"; reference:url,www.malwarepatrol.net; fid:28614; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/sempre.amigos"; reference:url,www.malwarepatrol.net; fid:31822; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/senhas1231"; reference:url,www.malwarepatrol.net; fid:28089; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/seriemagica/Musical.Cards"; reference:url,www.malwarepatrol.net; fid:25047; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/serverphotos"; reference:url,www.malwarepatrol.net; fid:25858; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/slidesimagens"; reference:url,www.malwarepatrol.net; fid:26294; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/slidesimagens/animations"; reference:url,www.malwarepatrol.net; fid:31558; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/smate"; reference:url,www.malwarepatrol.net; fid:31278; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/sorte2006"; reference:url,www.malwarepatrol.net; fid:36040; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/systemhost"; reference:url,www.malwarepatrol.net; fid:32080; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/tempo19810101"; reference:url,www.malwarepatrol.net; fid:39535; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/terra.voip"; reference:url,www.malwarepatrol.net; fid:30199; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/terra_250813"; reference:url,www.malwarepatrol.net; fid:29332; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/terracartoes01"; reference:url,www.malwarepatrol.net; fid:24452; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/terrahtml"; reference:url,www.malwarepatrol.net; fid:37211; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/titulo2006"; reference:url,www.malwarepatrol.net; fid:36050; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/today2007"; reference:url,www.malwarepatrol.net; fid:46119; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/trafico"; reference:url,www.malwarepatrol.net; fid:30209; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/traspres"; reference:url,www.malwarepatrol.net; fid:32002; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/tse2006"; reference:url,www.malwarepatrol.net; fid:29574; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/tycrds"; reference:url,www.malwarepatrol.net; fid:32003; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/update007"; reference:url,www.malwarepatrol.net; fid:57638; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/video1234/famosas"; reference:url,www.malwarepatrol.net; fid:28691; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/videosvip/famosas"; reference:url,www.malwarepatrol.net; fid:24747; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/vintueta/informacao"; reference:url,www.malwarepatrol.net; fid:28520; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/vipmensagem/Mensagem"; reference:url,www.malwarepatrol.net; fid:30649; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/virtual601"; reference:url,www.malwarepatrol.net; fid:29526; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/vivi.com.br"; reference:url,www.malwarepatrol.net; fid:25225; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/vox2000/cards"; reference:url,www.malwarepatrol.net; fid:30370; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/voxcardl"; reference:url,www.malwarepatrol.net; fid:34594; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/voxcardparaqvc"; reference:url,www.malwarepatrol.net; fid:39651; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/voxcards1000"; reference:url,www.malwarepatrol.net; fid:29823; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/voxcardscartoes"; reference:url,www.malwarepatrol.net; fid:29589; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/voxcardvip"; reference:url,www.malwarepatrol.net; fid:31636; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/web334781"; reference:url,www.malwarepatrol.net; fid:38868; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/web_pag"; reference:url,www.malwarepatrol.net; fid:27298; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/webcamxpwin"; reference:url,www.malwarepatrol.net; fid:31548; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/webhomesite/fotodojapao"; reference:url,www.malwarepatrol.net; fid:35977; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/webkitmasters/vipcards"; reference:url,www.malwarepatrol.net; fid:25744; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/webvideos"; reference:url,www.malwarepatrol.net; fid:37962; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/xp102"; reference:url,www.malwarepatrol.net; fid:38059; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/xpupdate"; reference:url,www.malwarepatrol.net; fid:57604; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.gratisweb.com/zamjbg"; reference:url,www.malwarepatrol.net; fid:30078; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.guitarparts.com/img/img"; reference:url,www.malwarepatrol.net; fid:106990; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.guitarparts.com/zero/icon/private_icon"; reference:url,www.malwarepatrol.net; fid:102320; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.haocha618.com/allay"; reference:url,www.malwarepatrol.net; fid:144831; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.horizon-vendenheim.com/downloads"; reference:url,www.malwarepatrol.net; fid:159175; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.host1ng.com"; reference:url,www.malwarepatrol.net; fid:158654; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.howcodec.co.kr/setup"; reference:url,www.malwarepatrol.net; fid:127176; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.hsciholograms.com/Backup"; reference:url,www.malwarepatrol.net; fid:157307; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.huaihuaren.com/down"; reference:url,www.malwarepatrol.net; fid:144394; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.hunstantongolfclub.com/plugins/system/legacy"; reference:url,www.malwarepatrol.net; fid:157237; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.inhold.co.kr/download/season2"; reference:url,www.malwarepatrol.net; fid:126455; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.inhold.co.kr/download/season6"; reference:url,www.malwarepatrol.net; fid:139153; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.inhold.co.kr/download/season7"; reference:url,www.malwarepatrol.net; fid:125927; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.ioms.kr/bless/bbs/img"; reference:url,www.malwarepatrol.net; fid:138326; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.ireneomassidda.it/_notes"; reference:url,www.malwarepatrol.net; fid:91810; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.isoburner.net"; reference:url,www.malwarepatrol.net; fid:135457; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.isoripper.net"; reference:url,www.malwarepatrol.net; fid:135458; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.itotolo.com/newapp1"; reference:url,www.malwarepatrol.net; fid:145254; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.ivankapresent.com/userdata"; reference:url,www.malwarepatrol.net; fid:150588; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.jasminetower.com/uploads/images"; reference:url,www.malwarepatrol.net; fid:138354; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.jhcomp1609.com/eng/css"; reference:url,www.malwarepatrol.net; fid:158655; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.junfac.com/shop/images/.x"; reference:url,www.malwarepatrol.net; fid:116951; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.kingnet.com.tw/jpg_gif"; reference:url,www.malwarepatrol.net; fid:101448; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.korea3s.org/korea3s/uploads/notice"; reference:url,www.malwarepatrol.net; fid:157910; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.koxp.org"; reference:url,www.malwarepatrol.net; fid:152707; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.kqmxd.cn"; reference:url,www.malwarepatrol.net; fid:158907; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.kscomputing.biz"; reference:url,www.malwarepatrol.net; fid:155266; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.legis-sc.com.br/legis/img_upload"; reference:url,www.malwarepatrol.net; fid:45747; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.leivas.com"; reference:url,www.malwarepatrol.net; fid:116365; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.lmwoool.com/down"; reference:url,www.malwarepatrol.net; fid:155531; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.lungkorea.org/push/buton/virtual"; reference:url,www.malwarepatrol.net; fid:158445; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.makehistory2010.com/ajax"; reference:url,www.malwarepatrol.net; fid:149899; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.marco-mty.com.mx/catalog/images/watch"; reference:url,www.malwarepatrol.net; fid:150756; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.masksurf.com/downloads"; reference:url,www.malwarepatrol.net; fid:158446; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.mcadmon.com/images"; reference:url,www.malwarepatrol.net; fid:93327; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.mcadmon.com/images/personas/_vti_cnf"; reference:url,www.malwarepatrol.net; fid:91669; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.mebelmuroma.ru/price.files/price.files"; reference:url,www.malwarepatrol.net; fid:92515; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.meishuai.net/down"; reference:url,www.malwarepatrol.net; fid:144675; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.members.lycos.co.uk/xnassor"; reference:url,www.malwarepatrol.net; fid:150057; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.metin-yang.yoyo.pl"; reference:url,www.malwarepatrol.net; fid:136276; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.mjbox.com/r/yi/yicharlie"; reference:url,www.malwarepatrol.net; fid:140734; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.mmobot.net/Knight2/EN/download"; reference:url,www.malwarepatrol.net; fid:152940; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.monaco-auto.com/stocklist/upload/images"; reference:url,www.malwarepatrol.net; fid:156155; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.monuvit.megabyet.net/namb1"; reference:url,www.malwarepatrol.net; fid:148877; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.motion-it.co.uk"; reference:url,www.malwarepatrol.net; fid:143969; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.mouseindustries.com"; reference:url,www.malwarepatrol.net; fid:102551; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.mp3-to-ring.com/download"; reference:url,www.malwarepatrol.net; fid:149196; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.mst-sul.com/november"; reference:url,www.malwarepatrol.net; fid:156081; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.mycar021.com/download"; reference:url,www.malwarepatrol.net; fid:146068; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.mytrailer.z1.ro/player"; reference:url,www.malwarepatrol.net; fid:159653; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.naphi.com/img"; reference:url,www.malwarepatrol.net; fid:149896; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.nastassja-kinski.jp/gallery/images/smiles"; reference:url,www.malwarepatrol.net; fid:91391; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.netsharingsite.com/downloads"; reference:url,www.malwarepatrol.net; fid:156667; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.nettoolz.info"; reference:url,www.malwarepatrol.net; fid:157305; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.newpartyworld.com/cert"; reference:url,www.malwarepatrol.net; fid:155156; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.novato.pochta.com"; reference:url,www.malwarepatrol.net; fid:157270; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.nscps.pe.kr/DownLoad/CpsNew/ver18"; reference:url,www.malwarepatrol.net; fid:135255; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.nscps.pe.kr/DownSetup/NewDown"; reference:url,www.malwarepatrol.net; fid:136916; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.ntcub.com/update/o20100806"; reference:url,www.malwarepatrol.net; fid:158478; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.olqvideos.com/vi/plugin"; reference:url,www.malwarepatrol.net; fid:157586; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.one2one.com/static/class"; reference:url,www.malwarepatrol.net; fid:77974; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.opendrive.com/files/6869570_XwTqj_8052"; reference:url,www.malwarepatrol.net; fid:156913; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.ozgunkimya.com/aspnet_client/system_web"; reference:url,www.malwarepatrol.net; fid:92822; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.panties3.com/movies"; reference:url,www.malwarepatrol.net; fid:110663; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.parapesc.megabyet.net/novapasta"; reference:url,www.malwarepatrol.net; fid:148117; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.pascoa.xpg.com.br"; reference:url,www.malwarepatrol.net; fid:28536; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.pcdebenyokken.net"; reference:url,www.malwarepatrol.net; fid:150199; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.pcprivacy.kr/app/files2"; reference:url,www.malwarepatrol.net; fid:156082; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.piramida33.ru/Pic/..."; reference:url,www.malwarepatrol.net; fid:91887; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.pj3.net/down"; reference:url,www.malwarepatrol.net; fid:145444; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.play0nlink.com/ma"; reference:url,www.malwarepatrol.net; fid:86293; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.pluspack.or.kr/program2"; reference:url,www.malwarepatrol.net; fid:150295; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.pmba12322.pwp.blueyonder.co.uk"; reference:url,www.malwarepatrol.net; fid:93864; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.pointway.co.kr/Info/Application"; reference:url,www.malwarepatrol.net; fid:104341; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.pointway.co.kr/Info/Application/clubbox"; reference:url,www.malwarepatrol.net; fid:104547; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.popcorn.ma"; reference:url,www.malwarepatrol.net; fid:151552; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.powerxgames.de/Downloads/Version3_3"; reference:url,www.malwarepatrol.net; fid:159655; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.pppw910112.info"; reference:url,www.malwarepatrol.net; fid:157248; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.promangord.org/images"; reference:url,www.malwarepatrol.net; fid:93356; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.prospot.co.uk/images"; reference:url,www.malwarepatrol.net; fid:158587; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.qq88202.info"; reference:url,www.malwarepatrol.net; fid:157269; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.rapidupload.com"; reference:url,www.malwarepatrol.net; fid:6395; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.refinor.com/REFICARD/fotos"; reference:url,www.malwarepatrol.net; fid:141729; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.ring23.narod.ru/nod_login/upd_version"; reference:url,www.malwarepatrol.net; fid:153619; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.ripprotecteddvd.com"; reference:url,www.malwarepatrol.net; fid:135323; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.safer-scan.com"; reference:url,www.malwarepatrol.net; fid:130686; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.sailing.it//store/img/caixaeconomica"; reference:url,www.malwarepatrol.net; fid:122069; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.salmared.com/public/phponline/images/themes/3"; reference:url,www.malwarepatrol.net; fid:87990; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.save21.pe.kr/DownLoadFile/BaePo/ver206"; reference:url,www.malwarepatrol.net; fid:149911; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.save21.pe.kr/DownLoadFile/BaePo/ver231"; reference:url,www.malwarepatrol.net; fid:157434; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.scgfyy.com/images/index_bn"; reference:url,www.malwarepatrol.net; fid:155798; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.sealux.cz/fotozub"; reference:url,www.malwarepatrol.net; fid:91762; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.sejahoje.com.br"; reference:url,www.malwarepatrol.net; fid:156742; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.sheriffes32.dominiotemporario.com"; reference:url,www.malwarepatrol.net; fid:157125; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.shopnon.com/core/v1"; reference:url,www.malwarepatrol.net; fid:139788; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.spilling1.com"; reference:url,www.malwarepatrol.net; fid:157128; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.springlabors.us/Old/menus_c/awmData-menus_c"; reference:url,www.malwarepatrol.net; fid:157129; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.spycar.org/Spycar_files"; reference:url,www.malwarepatrol.net; fid:151601; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.strek.co.th/css"; reference:url,www.malwarepatrol.net; fid:158909; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.sysec.tomig.com/news"; reference:url,www.malwarepatrol.net; fid:137628; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.taiwanxs.com/data/download/201004"; reference:url,www.malwarepatrol.net; fid:152807; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.tbcode.com/ist/softwares/v4.0"; reference:url,www.malwarepatrol.net; fid:29866; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.tc2000.com.ar/images/equipos"; reference:url,www.malwarepatrol.net; fid:146685; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.teambuildamovie.com/bbb7"; reference:url,www.malwarepatrol.net; fid:55818; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.thiagomedeiros.com/blog/wp-content/uploads"; reference:url,www.malwarepatrol.net; fid:158764; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.tianyuba.com/love"; reference:url,www.malwarepatrol.net; fid:159661; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.tier10.info"; reference:url,www.malwarepatrol.net; fid:144182; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.toolsis.com/images"; reference:url,www.malwarepatrol.net; fid:141952; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.topmecta.co.tv"; reference:url,www.malwarepatrol.net; fid:157827; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.torredelveguer.com/img/icons/tabs"; reference:url,www.malwarepatrol.net; fid:91734; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.tppstrooband.nl/cache"; reference:url,www.malwarepatrol.net; fid:155448; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.turbobipower.go.ro/images/smiles"; reference:url,www.malwarepatrol.net; fid:130459; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.uploadhut.com"; reference:url,www.malwarepatrol.net; fid:15722; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.ursagates.co.uk/templates/rt_solarsentinel_j15/images/body/white"; reference:url,www.malwarepatrol.net; fid:157240; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.v989.com"; reference:url,www.malwarepatrol.net; fid:152717; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.vajinadaraltici.tk"; reference:url,www.malwarepatrol.net; fid:145271; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.vanessawe.dominiotemporario.com/Nsilva"; reference:url,www.malwarepatrol.net; fid:156669; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.vc66.com/tj/mm"; reference:url,www.malwarepatrol.net; fid:154919; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.velamp.it"; reference:url,www.malwarepatrol.net; fid:155479; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.virusbox.net"; reference:url,www.malwarepatrol.net; fid:156381; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.w2ww.wwvv.us/images/css/updates"; reference:url,www.malwarepatrol.net; fid:145367; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.webmester.net/logs/old"; reference:url,www.malwarepatrol.net; fid:125061; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.wgus.net"; reference:url,www.malwarepatrol.net; fid:156090; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.winavm.com"; reference:url,www.malwarepatrol.net; fid:144405; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.winmend.com/pad/download"; reference:url,www.malwarepatrol.net; fid:153403; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.wizpop.co.kr/core/v1"; reference:url,www.malwarepatrol.net; fid:151842; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.wsip.com.cn/uploads/now"; reference:url,www.malwarepatrol.net; fid:157542; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.www-start-page.com"; reference:url,www.malwarepatrol.net; fid:49691; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.xunlei100.com/msn/software/partner/down"; reference:url,www.malwarepatrol.net; fid:142172; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.xunlei100.com/msn/software/partner/dw08613"; reference:url,www.malwarepatrol.net; fid:148982; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.xunlei100.com/msn/software/partner/p2"; reference:url,www.malwarepatrol.net; fid:156289; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.xunlei6x.com/msn/software/partner/dwq0617"; reference:url,www.malwarepatrol.net; fid:150021; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.xxxtoolbar.com/ist/softwares/v4.0"; reference:url,www.malwarepatrol.net; fid:29516; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.yes-baby.com.cn/aq"; reference:url,www.malwarepatrol.net; fid:154926; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.yollomeo.com/pd"; reference:url,www.malwarepatrol.net; fid:147778; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.youtubs.megabyet.net/dmais"; reference:url,www.malwarepatrol.net; fid:147606; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.yren8.com/yi"; reference:url,www.malwarepatrol.net; fid:157303; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.ysbweb.com/ist/softwares/v4.0"; reference:url,www.malwarepatrol.net; fid:85408; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.ysbweb.com/ysb/new_exe/regular/level3/3"; reference:url,www.malwarepatrol.net; fid:138735; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.yxyuan.com/down"; reference:url,www.malwarepatrol.net; fid:137238; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.zmarte.com/imagenes"; reference:url,www.malwarepatrol.net; fid:91722; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.zsdacice.cz/informace/inc"; reference:url,www.malwarepatrol.net; fid:73222; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www.zzgame.co.kr/SPMgrs"; reference:url,www.malwarepatrol.net; fid:133400; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www1.rapidupload.com"; reference:url,www.malwarepatrol.net; fid:6398; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www10.rapidupload.com"; reference:url,www.malwarepatrol.net; fid:14247; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www11.rapidupload.com"; reference:url,www.malwarepatrol.net; fid:14248; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www12.rapidupload.com"; reference:url,www.malwarepatrol.net; fid:14249; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www13.rapidupload.com"; reference:url,www.malwarepatrol.net; fid:14250; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www14.rapidupload.com"; reference:url,www.malwarepatrol.net; fid:14251; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www15.rapidupload.com"; reference:url,www.malwarepatrol.net; fid:14252; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www2.rapidupload.com"; reference:url,www.malwarepatrol.net; fid:6399; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www3.rapidupload.com"; reference:url,www.malwarepatrol.net; fid:6400; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www4.rapidupload.com"; reference:url,www.malwarepatrol.net; fid:6401; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www5.rapidupload.com"; reference:url,www.malwarepatrol.net; fid:6402; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www6.rapidupload.com"; reference:url,www.malwarepatrol.net; fid:6403; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www7.rapidupload.com"; reference:url,www.malwarepatrol.net; fid:6396; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www8.rapidupload.com"; reference:url,www.malwarepatrol.net; fid:6404; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://www9.rapidupload.com"; reference:url,www.malwarepatrol.net; fid:6397; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://wwww.wwvv.us/images/css/updates"; reference:url,www.malwarepatrol.net; fid:145366; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://x.2012down.com"; reference:url,www.malwarepatrol.net; fid:148849; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://x2x3.biz"; reference:url,www.malwarepatrol.net; fid:149935; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://xactlysin.fileave.com"; reference:url,www.malwarepatrol.net; fid:139888; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://xiazai.cpushpop.com/4"; reference:url,www.malwarepatrol.net; fid:124156; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://xiazai.cpushpop.com/7"; reference:url,www.malwarepatrol.net; fid:138224; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://xiazai.cpushpop.com/8"; reference:url,www.malwarepatrol.net; fid:120763; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://xiazai.qqceo.net/nc"; reference:url,www.malwarepatrol.net; fid:151075; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://xiazai.qqceo.net/taipingyang/baobei"; reference:url,www.malwarepatrol.net; fid:156095; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://xiazai.qqceo.net/taipingyang/qqncbl"; reference:url,www.malwarepatrol.net; fid:157469; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://xiazai807.3322.org/exe"; reference:url,www.malwarepatrol.net; fid:159322; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://xiazai828.3322.org/exe"; reference:url,www.malwarepatrol.net; fid:159323; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://xoomer.alice.it/comprafacilpedidos2008/pedidos"; reference:url,www.malwarepatrol.net; fid:85917; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://xsoso.info/tu"; reference:url,www.malwarepatrol.net; fid:158451; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://xyz.www.com-doumi.net/app/install"; reference:url,www.malwarepatrol.net; fid:135254; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://xz0827.3322.org/cj"; reference:url,www.malwarepatrol.net; fid:158914; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://yamanbau.de"; reference:url,www.malwarepatrol.net; fid:129868; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://yeps.co.kr/setupSide"; reference:url,www.malwarepatrol.net; fid:145550; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://yoo.fileave.com"; reference:url,www.malwarepatrol.net; fid:142863; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://youka.dothome.co.kr"; reference:url,www.malwarepatrol.net; fid:154931; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://yousex.in"; reference:url,www.malwarepatrol.net; fid:146709; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://youtubeup.fileave.com"; reference:url,www.malwarepatrol.net; fid:141048; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://yoyoddos.3322.org"; reference:url,www.malwarepatrol.net; fid:147622; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ysbweb.com/ist/softwares/istupdates"; reference:url,www.malwarepatrol.net; fid:114428; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://ysbweb.com/ist/softwares/v4.0"; reference:url,www.malwarepatrol.net; fid:114430; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://z.bbsfu.com/js"; reference:url,www.malwarepatrol.net; fid:156131; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://z08.zupload.com"; reference:url,www.malwarepatrol.net; fid:18094; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://z10.zupload.com"; reference:url,www.malwarepatrol.net; fid:15717; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://z13.zupload.com"; reference:url,www.malwarepatrol.net; fid:15721; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://z15.zupload.com"; reference:url,www.malwarepatrol.net; fid:15719; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://z26.zupload.com"; reference:url,www.malwarepatrol.net; fid:16094; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://zhang.nu/poiwiki/doc/vd"; reference:url,www.malwarepatrol.net; fid:120835; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://zhengshu.osa.pl/zhengshu"; reference:url,www.malwarepatrol.net; fid:141057; rev:20100906193756;)
alert (msg:"The address you tried to access points to a Malware. Please visit http://www.malwarepatrol.net for more information"; url_content:"http://zontrhost.net/pwr"; reference:url,www.malwarepatrol.net; fid:131637; rev:20100906193756;)