alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET MALWARE
AntiSpywareMaster?.com Fake AV User-Agent"; flow:to_server,established; content:"|0d 0a|User-Agent\:
AsmUpdater?"; classtype:trojan-activity; sid:200829; rev:1;)
Added 2008-06-11 13:24:19 UTC