alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Yahoo550.com Related Downloader/Trojan Checkin"; flow:established,to_server; content:"/image/logo.jpg?queryid="; http_uri; pcre:"/queryid=\d+$/U"; metadata: former_category MALWARE; reference:url,doc.emergingthreats.net/2008049; classtype:trojan-activity; sid:2008049; rev:5; metadata:created_at 2010_07_30, updated_at 2020_04_21;)

Added 2020-04-21 19:23:58 UTC

Please enter documentation, comments, false positives, or concerns with this signature. Press the Attach button below to add samples or Pcaps.

---

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Yahoo550.com Related Downloader/Trojan Checkin"; flow:established,to_server; content:"/image/logo.jpg?queryid="; http_uri; pcre:"/queryid=\d+$/U"; metadata: former_category MALWARE; reference:url,doc.emergingthreats.net/2008049; classtype:trojan-activity; sid:2008049; rev:5; metadata:created_at 2010_07_30, updated_at 2010_07_30;)

Added 2019-09-26 19:56:10 UTC

---

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Yahoo550.com Related Downloader/Trojan Checkin"; flow:established,to_server; content:"/image/logo.jpg?queryid="; http_uri; pcre:"/queryid=\d+$/U"; reference:url,doc.emergingthreats.net/2008049; classtype:trojan-activity; sid:2008049; rev:5; metadata:created_at 2010_07_30, updated_at 2010_07_30;)

Added 2018-09-13 19:39:37 UTC

---

Added 2018-09-13 17:53:43 UTC

---

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET TROJAN Yahoo550.com Related Downloader/Trojan Checkin"; flow:established,to_server; content:"/image/logo.jpg?queryid="; http_uri; pcre:"/queryid=\d+$/U"; reference:url,doc.emergingthreats.net/2008049; classtype:trojan-activity; sid:2008049; rev:5; metadata:created_at 2010_07_30, updated_at 2010_07_30;)

Added 2017-08-07 21:01:15 UTC

---

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Yahoo550.com Related Downloader/Trojan Checkin"; flow:established,to_server; content:"/image/logo.jpg?queryid="; http_uri; pcre:"/queryid=\d+$/U"; reference:url,doc.emergingthreats.net/2008049; classtype:trojan-activity; sid:2008049; rev:5;)

Added 2012-06-22 00:48:41 UTC

---

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Yahoo550.com Related Downloader/Trojan Checkin"; flow:established,to_server; content:"/image/logo.jpg?queryid="; http_uri; pcre:"/queryid=\d+/U"; reference:url,doc.emergingthreats.net/2008049; classtype:trojan-activity; sid:2008049; rev:4;)

Added 2011-10-12 19:24:21 UTC

---

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Yahoo550.com Related Downlaoder/Trojan Checkin via HTTP"; flow:established,to_server; content:"/image/logo.jpg?queryid="; http_uri; pcre:"/queryid=\d+/U"; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2008049; sid:2008049; rev:3;)

Added 2011-09-14 22:37:50 UTC

---

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Yahoo550.com Related Downlaoder/Trojan Checkin via HTTP"; flow:established,to_server; content:"/image/logo.jpg?queryid="; http_uri; pcre:"/queryid=\d+/U"; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2008049; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Yahoo550.com; sid:2008049; rev:3;)

Added 2011-02-04 17:27:09 UTC

---

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Yahoo550.com Related Downlaoder/Trojan Checkin via HTTP"; flow:established,to_server; uricontent:"/image/logo.jpg?queryid="; pcre:"/queryid=\d+/U"; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2008049; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Yahoo550.com; sid:2008049; rev:2;)

Added 2009-02-13 19:47:26 UTC

---

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Yahoo550.com Related Downlaoder/Trojan Checkin via HTTP"; flow:established,to_server; uricontent:"/image/logo.jpg?queryid="; pcre:"/queryid=\d+/U"; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2008049; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Yahoo550.com; sid:2008049; rev:2;)

Added 2009-02-13 19:47:26 UTC

---

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Yahoo550.com Related Downlaoder/Trojan Checkin via HTTP"; flow:established,to_server; uricontent:"/image/logo.jpg?queryid="; pcre:"/queryid=\d+/U"; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2008049; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Yahoo550.com; sid:2008049; rev:2;)

Added 2009-02-13 19:46:39 UTC

---

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Yahoo550.com Related Downlaoder/Trojan Checkin via HTTP"; flow:established,to_server; uricontent:"/image/logo.jpg?queryid="; pcre:"/queryid=\d+/U"; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2008049; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Yahoo550.com; sid:2008049; rev:2;)

Added 2009-02-13 19:46:39 UTC

---

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Yahoo550.com Related Downlaoder/Trojan Checkin via HTTP"; flow:established,to_server; uricontent:"/image/logo.jpg?queryid="; pcre:"/queryid=\d+/U"; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2008049; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Yahoo550.com; sid:2008049; rev:2;)

Added 2009-02-13 19:45:24 UTC

---

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Yahoo550.com Related Downlaoder/Trojan Checkin via HTTP"; flow:established,to_server; uricontent:"/image/logo.jpg?queryid="; pcre:"/queryid=\d+/U"; classtype:trojan-activity; reference:url,doc.emergingthreats.net/2008049; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/VIRUS/TROJAN_Yahoo550.com; sid:2008049; rev:2;)

Added 2009-02-13 19:45:24 UTC

---

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET TROJAN Yahoo550.com Related Downlaoder/Trojan Checkin via HTTP"; flow:established,to_server; uricontent:"/image/logo.jpg?queryid="; pcre:"/queryid=\d+/U"; classtype:trojan-activity; sid:2008049; rev:1;)

Added 2008-03-23 18:46:15 UTC

---