all attachments of the fourm Kafan http://bbs.kafan.cn/forum.php. I think the reason is that there are lots of virus samples in http://bbs.kafan.cn/forum-31-1.html.Kafan is a fourm about anti-virus software,HIPS,firewall and so on.
misinform?..what do you mean
Sorry,my English is very poor,I mean a false detection like this .
http://i.imgbox.com/abf3xZV5.png
URL:mal means the url is on a block list
URLvoid.
http://www.urlvoid.com/scan/bbs.kafan.cn/
urlquery does not give any report today. http://urlquery.net/report.php?id=1300126
but 2011.11.19 it did. http://urlquery.net/report.php?id=186281. see suricata filter
report from 5/2-2012
http://zulu.zscaler.com/submission/show/c332232837a71b4fb3695be97172316d-1335936057
today
http://zulu.zscaler.com/submission/show/c332232837a71b4fb3695be97172316d-1362646486