Virus

Date: Two weeks ago (events: 524)
My Protection (events: 11)

8/15/2010 9:38:04 PM Databases are obsolete Kaspersky Internet Security
8/15/2010 7:36:16 PM Protection is not running Kaspersky Internet Secur
ity
ity
ity
8/15/2010 6:47:11 AM Databases are obsolete Kaspersky Internet Security
8/15/2010 3:08:16 AM Protection is not running Kaspersky Internet Secur
ity
File Anti-Virus (events: 6)
8/15/2010 9:37:58 PM Task started Kaspersky Internet Security
File Anti-Virus
File Anti-Virus
File Anti-Virus
8/15/2010 6:28:45 AM Task started Kaspersky Internet Security
File Anti-Virus
File Anti-Virus
File Anti-Virus
Mail Anti-Virus (events: 6)
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Web Anti-Virus (events: 6)
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Network Attack Blocker (events: 6)
Network Attack Blocker
Anti-Spam (events: 6)
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Application Control (events: 297)
8/15/2010 8:46:05 PM Allowed: Start driver Absent Start driver C:\WINDO
WS\SYSTEM32\DRIVERS\EAGLENT.SYS Start driver
8/15/2010 8:45:20 PM Denied: Start driver Absent Start driver C:\DOCUM
E~1\BAGOES\LOCALS~1\TEMP\EAGLENT.SYS Start driver
8/15/2010 8:45:19 PM Allowed: Low level disk access PointBlank Low leve
l disk access Device\Harddisk0\DR0 Low level disk access
8/15/2010 8:45:08 PM Allowed: Using system program interfaces (DNS) HSUpdate
Use DNS caching system for conversion file.pb.gemscool.com Using system pro
gram interfaces (DNS)
8/15/2010 8:44:28 PM Allowed: Code intrusion PointBlank Code intrusion
d:\gemscool\point blank\pointblank.exe Code intrusion
8/15/2010 8:44:28 PM Allowed: Setting debug privileges PointBlank
Setting debug privileges Setting debug privileges
8/15/2010 8:44:15 PM Allowed: Using system program interfaces (DNS) PBLaunch
er Use DNS caching system for conversion update.pb.gemscool.com Using sy
stem program interfaces (DNS)
WS\SYSTEM32\DRIVERS\HTTP.SYS Start driver
8/15/2010 9:38:16 PM Microsoft DirectX Diagnostic Tool Placed i
n group Trusted Signed by the digital signature of entrusted manufacturers
Application Control
8/15/2010 7:31:46 PM AU_.EXE Placed in group Low Restricted High val
ue of threat rating calculated heuristically
8/15/2010 7:31:45 PM uninstall_plugin.exe Placed in group Low Rest
ricted High value of threat rating calculated heuristically
8/15/2010 7:31:29 PM INSTALL_FLASH_PLAYER.EXE Placed in group
Trusted Signed by the digital signature of entrusted manufacturers
Application Control
8/15/2010 6:39:15 PM Allowed: Start driver Absent Start driver C:\DOCUM
8/15/2010 6:39:01 PM Allowed: Using system program interfaces (DNS) Audition
Client Patcher Use DNS caching system for conversion notice.ayodance.com
Using system program interfaces (DNS)
Application Control
8/15/2010 11:05:06 AM Allowed: Start driver Absent Start driver C:\DOCUM
8/15/2010 11:04:58 AM Allowed: Using system program interfaces (DNS) Audition
8/15/2010 10:57:09 AM Allowed: Using program interfaces of other process
FIREFOX.VBS Using program interfaces of other process c:\documents and
settings\bagoes\local settings\temp\firefox.vbs Using program interfaces
of other process
8/15/2010 10:57:09 AM Allowed: Access to critical system objects FIREFOX.
VBS Access to critical system objects Access to critical syste
m objects
8/15/2010 10:53:45 AM Allowed: Using system program interfaces (DNS) INSTALL_
INSTALL_FLASH_PLAYER.EXE Use DNS caching system for conversion fiashpia
yer.soft-2010.net Using system program interfaces (DNS)
FIREFOX.VBS Using program interfaces of other process c:\documents and
settings\bagoes\local settings\temp\firefox.vbs Using program interfaces
of other process
8/15/2010 10:51:55 AM Allowed: Access to critical system objects FIREFOX.
VBS Access to critical system objects Access to critical syste
m objects
8/15/2010 10:51:54 AM FIREFOX.VBS Placed in group Low Restricted
High value of threat rating calculated heuristically
8/15/2010 10:51:14 AM Adobe® Flash® Player Installer/Uninstaller 10.1 r53
Placed in group Trusted Signed by the digital signature of entrusted manufacture
rs
8/15/2010 10:49:47 AM Allowed: Using system program interfaces (DNS) INSTALL_
INSTALL_FLASH_PLAYER.EXE Use DNS caching system for conversion fiashpia
yer.soft-2010.net Using system program interfaces (DNS)
8/15/2010 10:49:47 AM INSTALL_INSTALL_FLASH_PLAYER.EXE Placed i
n group Low Restricted High value of threat rating calculated heuristically
8/15/2010 10:34:28 AM Denied: Start driver Absent Start driver C:\WINDO
8/15/2010 9:46:46 AM Allowed: Start driver Absent Start driver C:\WINDO
8/15/2010 9:46:44 AM Allowed: Low level disk access PointBlank Low leve
8/15/2010 9:46:34 AM Allowed: Using system program interfaces (DNS) HSUpdate
8/15/2010 9:46:20 AM Allowed: Code intrusion PointBlank Code intrusion
8/15/2010 9:46:20 AM Allowed: Setting debug privileges PointBlank
8/15/2010 9:46:05 AM Allowed: Using system program interfaces (DNS) PBLaunch
Application Control
8/15/2010 5:15:54 AM UPDATE.EXE Placed in group Trusted Signed b
y the digital signature of entrusted manufacturers
8/15/2010 4:31:26 AM Allowed: Pausing other processes and threads DrWatson
Postmortem Debugger Suspend another process c:\windows\system32\drwtsn32.exe
Pausing other processes and threads
8/15/2010 4:31:25 AM Allowed: Code intrusion DrWatson Postmortem Debugger
Code intrusion c:\windows\system32\drwtsn32.exe Code intrusion
8/15/2010 4:31:25 AM Allowed: Setting debug privileges DrWatson Postmor
tem Debugger Setting debug privileges Setting debug privileges
8/15/2010 4:31:19 AM Allowed: Pausing other processes and threads Microsof
t Application Error Reporting Suspend another process c:\windows\system32\dwwi
n.exe Pausing other processes and threads
8/15/2010 4:31:02 AM DrWatson Postmortem Debugger Placed in group
8/15/2010 4:24:31 AM Denied: Start driver Absent Start driver C:\DOCUM
8/15/2010 4:24:22 AM Auto Update Utility Placed in group Trusted
Signed by the digital signature of entrusted manufacturers
8/15/2010 4:24:17 AM HSUpdate Placed in group Trusted Signed b
8/15/2010 4:23:50 AM PBLauncher Placed in group Low Restricted
8/15/2010 4:13:40 AM Winamp Agent Placed in group Trusted Known on
the database of the known software
8/15/2010 4:13:08 AM Winamp Placed in group Trusted Signed by the di
gital signature of entrusted manufacturers
8/15/2010 4:12:58 AM EMusicClient Placed in group Trusted Known on
8/15/2010 4:12:54 AM bundle3.exe Placed in group Trusted Signed b
8/15/2010 4:12:43 AM NS539.TMP Placed in group Low Restricted
8/15/2010 4:12:37 AM Winamp IE Toolbar Server Placed in group
8/15/2010 4:12:31 AM WINAMP_TOOLBAR_IE.EXE Placed in group Trusted
8/15/2010 4:12:31 AM NS536.TMP Placed in group Low Restricted
8/15/2010 4:12:28 AM BUNDLE2.EXE Placed in group Trusted Signed b
8/15/2010 4:12:01 AM TCP/IP Ping Command Placed in group Trusted
8/15/2010 4:12:01 AM NS52D.TMP Placed in group Trusted Known on
8/15/2010 4:11:46 AM PX Install Application Placed in group Trusted
8/15/2010 4:11:44 AM PXSETUP.EXE Placed in group Trusted Signed b
8/15/2010 4:11:21 AM Winamp Installer Placed in group Trusted
8/15/2010 4:10:57 AM RealNetworks Helper Application Placed in group
8/15/2010 4:10:16 AM RealShare Launcher Placed in group Trusted
8/15/2010 4:10:15 AM RealConverter Placed in group Trusted Signed b
8/15/2010 4:09:56 AM RealNetworks Event Launcher Placed in group
8/15/2010 4:09:55 AM RealNetworks Scheduler Placed in group Trusted
8/15/2010 4:09:53 AM RealPlayer Placed in group Trusted Signed b
8/15/2010 4:09:22 AM REALPLAY_MOUNTPOINTS.EXE Placed in group
8/15/2010 4:09:21 AM setreg.exe Placed in group Low Restricted
8/15/2010 4:09:08 AM DEFENC.REG Placed in group Trusted Known on
8/15/2010 4:09:08 AM defenc.exe Placed in group Low Restricted
8/15/2010 4:08:47 AM RealUpgrade Launcher Placed in group Trusted
8/15/2010 4:08:21 AM Allowed: Setting debug privileges UPGRADE.MSI
UPGRADE.MSI Using program interfaces of other process c:\documents and
settings\bagoes\local settings\temp\~rnsetu0\upgrade\upgrade.msi Using pr
ogram interfaces of other process
8/15/2010 4:08:21 AM Allowed: Exiting Microsoft Windows UPGRADE.MSI
Windows shutdown Exiting Microsoft Windows
8/15/2010 4:08:18 AM Allowed: Setting debug privileges UPGRADE.MSI
UPGRADE.MSI Using program interfaces of other process c:\documents and
settings\bagoes\local settings\temp\~rnsetu0\upgrade\upgrade.msi Using pr
ogram interfaces of other process
8/15/2010 4:08:18 AM Allowed: Exiting Microsoft Windows UPGRADE.MSI
Windows shutdown Exiting Microsoft Windows
8/15/2010 4:08:17 AM UPGRADE.MSI Placed in group Low Restricted
8/15/2010 4:07:45 AM CONVERTER_INSTALLER.EXE Placed in group Trusted
8/15/2010 4:06:37 AM Shell executable of Setup program Placed i
8/15/2010 4:06:04 AM Adobe® Flash® Player Plugin Installer Placed i
8/15/2010 4:05:51 AM Firefox Placed in group Trusted Signed by the di
8/15/2010 4:05:27 AM setup.exe Placed in group Trusted Signed b
8/15/2010 4:05:14 AM Firefox Placed in group Trusted Signed by the di
8/15/2010 4:04:27 AM Network Diagnostic for Windows XP Placed i
8/15/2010 4:04:22 AM WebToolBar component Placed in group Trusted
8/15/2010 4:02:43 AM MATS_RUN.IEADDON.EXE Placed in group Trusted
8/15/2010 3:31:51 AM Internet Explorer Placed in group Trusted
8/15/2010 3:26:51 AM Safely Remove Hardware applet Placed in group
8/15/2010 3:24:20 AM PBConfig.exe Placed in group Low Restricted
8/15/2010 3:23:23 AM Microsoft Application Error Reporting Placed i
8/15/2010 3:22:39 AM Windows Error Reporting Dump Reporting Tool
rs
8/15/2010 3:21:18 AM Allowed: Using system program interfaces (DNS) update.e
xe Use DNS caching system for conversion info.cabalonline.co.id Using sy
8/15/2010 3:21:14 AM update.exe Placed in group Trusted Signed b
8/15/2010 3:21:11 AM cabal.exe Placed in group Low Restricted
8/15/2010 3:20:51 AM Allowed: Using system program interfaces (DNS) TODO: <F
ile description> Use DNS caching system for conversion gamenoticecf.lyt
ogame.com Using system program interfaces (DNS)
8/15/2010 3:20:49 AM TODO: <File description> Placed in group
Low Restricted High value of threat rating calculated heuristically
8/15/2010 3:19:56 AM PointBlank Placed in group Low Restricted
8/15/2010 3:17:16 AM Audition Placed in group Low Restricted
8/15/2010 3:16:06 AM Audition Client Patcher Placed in group Low Rest
8/15/2010 3:11:18 AM Windows Genuine Advantage-Benachrichtigungen
Placed in group Low Restricted High value of threat rating calculated heuristic
ally
8/15/2010 3:09:37 AM hpwuSchd Application Placed in group Trusted
Known on the database of the known software
8/15/2010 3:09:36 AM Userinit Logon Application Placed in group
Application Control
8/15/2010 3:07:55 AM Windows Logon UI Placed in group Trusted
8/15/2010 3:07:23 AM CROSSFIRE.EXE Placed in group Low Restricted
8/15/2010 3:03:33 AM WMI Placed in group Trusted Signed by the di
8/15/2010 3:02:50 AM Microsoft Office Excel Placed in group Trusted
8/15/2010 3:01:54 AM HP Customer Participation Program Placed i
n group Trusted Known on the database of the known software
8/15/2010 3:01:32 AM HP Digital Imaging Toolbox Placed in group
Trusted Known on the database of the known software
8/15/2010 3:01:31 AM HP Print Utility Placed in group Trusted
8/15/2010 3:01:24 AM HP Installer Setup Placed in group Trusted
8/15/2010 3:01:16 AM HP Installer Reconnect Plug-In Placed in group
8/15/2010 3:00:08 AM WebReg application Placed in group Trusted
8/15/2010 3:00:06 AM HP All-in-One Launcher Utility Placed in group
8/15/2010 3:00:05 AM hpqdirec.exe Placed in group Trusted Known on
8/15/2010 3:00:01 AM TODO: <File description> Placed in group
8/15/2010 3:00:00 AM HP Installer Setup Wrapper/3rd party installer P
lug in Placed in group Trusted Signed by the digital signature of entrusted man
ufacturers
8/15/2010 2:59:39 AM GPCore COM object Placed in group Trusted
8/15/2010 2:59:29 AM Hewlett-Packard Product Assistant Placed i
8/15/2010 2:59:28 AM HP Installer CD Launch Plug-In Placed in group
8/15/2010 2:59:26 AM HP CUE Alert Popup Window Objects Placed i
8/15/2010 2:59:25 AM HP Installer Post Software Launcher Plug-In
rs
8/15/2010 2:59:23 AM HP CUE Status Root Placed in group Trusted
8/15/2010 2:59:21 AM HP Installer Setup Placed in group Trusted
8/15/2010 2:59:18 AM HP Installer Plug-In Placed in group Trusted
8/15/2010 2:59:11 AM DJ_SF_03_D2500_PRODUCTCONTEXT.MSI Placed i
8/15/2010 2:59:01 AM HP Digital Imaging Monitor Placed in group
8/15/2010 2:58:54 AM HPZFWX01.EXE Placed in group Trusted Known on
8/15/2010 2:57:22 AM HPZDUI01.EXE Placed in group Trusted Signed b
8/15/2010 2:57:07 AM YTB_7.0.5.0_1.4.1_HP_UBER_SETUP_.EXE Placed i
8/15/2010 2:56:50 AM HpqSRmon Placed in group Trusted Known on
8/15/2010 2:56:38 AM HP Autoplay Module Placed in group Trusted
8/15/2010 2:55:58 AM MSI47F.TMP Placed in group Trusted Signed b
8/15/2010 2:55:57 AM MSI47E.tmp Placed in group Trusted Signed b
8/15/2010 2:55:57 AM MSI47D.TMP Placed in group Trusted Signed b
8/15/2010 2:55:56 AM MSI47C.TMP Placed in group Trusted Signed b
8/15/2010 2:55:25 AM HP Smart Web Printing add-on for Internet Explor
er Placed in group Trusted Signed by the digital signature of entrusted man
ufacturers
8/15/2010 2:54:40 AM HP CUE DeviceDiscovery User Placed in group
Low Restricted High value of threat rating calculated heuristically
8/15/2010 2:54:39 AM HP CUE DeviceDiscovery Service Placed in group
8/15/2010 2:54:37 AM HP CUE Context Manager Objects Placed in group
8/15/2010 2:53:35 AM HP CUE Context Manager Objects Placed in group
8/15/2010 2:51:44 AM HPZARP01.EXE Placed in group Trusted Signed b
8/15/2010 2:51:40 AM HPZCDL01.EXE Placed in group Trusted Signed b
8/15/2010 2:51:28 AM HPZMSI01.EXE Placed in group Trusted Signed b
8/15/2010 2:51:02 AM FIXERR1714.EXE Placed in group Trusted Known on
8/15/2010 2:50:58 AM HPZRCV01.EXE Placed in group Trusted Signed b
8/15/2010 2:50:51 AM HPZPRL01.EXE Placed in group Trusted Signed b
8/15/2010 2:50:50 AM Verify Class ID Placed in group Trusted Signed b
8/15/2010 2:50:49 AM Windows Progman Group Converter Placed in group
8/15/2010 2:50:48 AM Run Once Wrapper Placed in group Trusted
8/15/2010 2:50:09 AM Attribute Utility Placed in group Trusted
8/15/2010 2:50:05 AM HPXPSCHK.EXE Placed in group Trusted Known on
8/15/2010 2:49:58 AM HPZSUI01.EXE Placed in group Trusted Signed b
8/15/2010 2:49:55 AM HPQBHP01.EXE Placed in group Trusted Known on
8/15/2010 2:49:48 AM HPZCHK01.EXE Placed in group Trusted Signed b
8/15/2010 2:49:44 AM HPZOPT01.EXE Placed in group Trusted Signed b
8/15/2010 2:49:14 AM HPZWUP01.EXE Placed in group Trusted Signed b
8/15/2010 2:49:12 AM HPZNOP01.EXE Placed in group Trusted Signed b
8/15/2010 2:49:05 AM USBREADY.EXE Placed in group Trusted Known on
8/15/2010 2:49:02 AM HPZREIN01.EXE Placed in group Trusted Signed b
8/15/2010 2:49:00 AM HPZSHL01.EXE Placed in group Trusted Signed b
8/15/2010 2:48:57 AM Y_HP_INTL_DETECT.EXE Placed in group Trusted
8/15/2010 2:48:56 AM HPZWRP01.EXE Placed in group Trusted Signed b
8/15/2010 2:48:53 AM HPZPSC01.EXE Placed in group Trusted Signed b
8/15/2010 2:46:07 AM Disk Defragmenter NTFS Module Placed in group
8/15/2010 2:46:06 AM Disk Defragmenter Module Placed in group
8/15/2010 2:40:51 AM Logon Screen Saver Placed in group Trusted
8/15/2010 2:30:52 AM HPZPNP01.EXE Placed in group Trusted Signed b
8/15/2010 2:30:42 AM HPZSETUP.EXE Placed in group Trusted Signed b
8/15/2010 2:30:35 AM HPZSTUB.EXE Placed in group Trusted Signed b
8/15/2010 2:30:29 AM Add Hardware Device Library Placed in group
8/15/2010 2:28:36 AM SETUP.EXE Placed in group Trusted Signed b
8/15/2010 2:28:29 AM Image Mastering API Placed in group Trusted
8/15/2010 2:28:29 AM Windows Shell Common Dll Placed in group
8/15/2010 2:25:46 AM Kaspersky Anti-Virus GUI Windows part Placed i
8/15/2010 2:25:46 AM Kaspersky Internet Security Placed in group
8/15/2010 2:25:46 AM Windows Update Placed in group Trusted Signed b
8/15/2010 2:25:46 AM Windows® installer Placed in group Trusted
8/15/2010 2:25:45 AM CTF Loader Placed in group Trusted Signed b
8/15/2010 2:25:45 AM Windows Security Center Notification App
rs
8/15/2010 2:25:45 AM Application Layer Gateway Service Placed i
8/15/2010 2:25:45 AM Windows Explorer Placed in group Trusted
8/15/2010 2:25:45 AM Spooler SubSystem App Placed in group Trusted
8/15/2010 2:25:45 AM Generic Host Process for Win32 Services Placed i
8/15/2010 2:25:45 AM ATI External Event Utility EXE Module Placed i
8/15/2010 2:25:45 AM LSA Shell (Export Version) Placed in group
8/15/2010 2:25:45 AM Services and Controller app Placed in group
8/15/2010 2:25:45 AM Windows NT Logon Application Placed in group
8/15/2010 2:25:44 AM Client Server Runtime Process Placed in group
8/15/2010 2:25:44 AM Windows NT Session Manager Placed in group
Application Control
Self-Defense (events: 50)
8/15/2010 8:46:09 PM Denied PointBlank Open C:\Program Files\Kaspers
ky Lab\Kaspersky Internet Security 2010\avp.exe
8/15/2010 9:39:33 PM Denied Windows Explorer Open C:\Program Files
\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
8/15/2010 9:38:18 PM Denied Microsoft DirectX Diagnostic Tool Open
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
8/15/2010 6:39:18 PM Denied Audition Open C:\Program Files\Kaspers
8/15/2010 11:05:09 AM Denied Audition Open C:\Program Files\Kaspers
8/15/2010 10:55:42 AM Denied Adobe® Flash® Player Installer/Uninstaller 10.1 r53
Open C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
8/15/2010 10:51:58 AM Denied WMI Open C:\Program Files\Kaspersky Lab\K
aspersky Internet Security 2010\avp.exe
8/15/2010 10:51:15 AM Denied Adobe® Flash® Player Installer/Uninstaller 10.1 r53
Open C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
8/15/2010 9:47:00 AM Denied PointBlank Open C:\Program Files\Kaspers
8/15/2010 6:30:19 AM Denied Windows Explorer Open C:\Program Files
8/15/2010 4:31:27 AM Denied DrWatson Postmortem Debugger Open C:\Progr
am Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
8/15/2010 4:31:27 AM Denied DrWatson Postmortem Debugger Open C:\Progr
8/15/2010 4:12:58 AM Denied Winamp Installer Open C:\Program Files
8/15/2010 4:12:58 AM Denied Winamp Installer Open C:\Program Files
8/15/2010 4:12:30 AM Denied BUNDLE2.EXE Open C:\Program Files\Kaspers
8/15/2010 4:12:29 AM Denied BUNDLE2.EXE Open C:\Program Files\Kaspers
8/15/2010 4:10:02 AM Denied RealPlayer Open C:\Program Files\Kaspers
8/15/2010 4:08:10 AM Denied CONVERTER_INSTALLER.EXE Open C:\Program Files
8/15/2010 4:08:10 AM Denied CONVERTER_INSTALLER.EXE Open C:\Program Files
8/15/2010 4:07:12 AM Denied Shell executable of Setup program Open
8/15/2010 4:07:12 AM Denied Shell executable of Setup program Open
8/15/2010 2:51:01 AM Denied HPZSETUP.EXE Open C:\Program Files\Kaspers
8/15/2010 2:50:07 AM Denied HPZSHL01.EXE Open C:\Program Files\Kaspers
8/15/2010 2:50:07 AM Denied HPZSHL01.EXE Open C:\Program Files\Kaspers
8/15/2010 2:49:08 AM Denied HPZSETUP.EXE Open C:\Program Files\Kaspers
8/15/2010 2:46:09 AM Denied Disk Defragmenter NTFS Module Open C:\Progr
Proactive Defense (events: 74)
8/15/2010 8:46:57 PM Detected: PDM.Keylogger Absent Keylogger activity
kernel mode memory patch
8/15/2010 8:46:08 PM Detected: PDM.Keylogger PointBlank Keylogger activi
ty kernel mode memory patch
8/15/2010 8:46:05 PM Allowed: PDM.Suspicious driver installation PointBla
nk D:\GEMSCOOL\POINT BLANK\POINTBLANK.EXE
8/15/2010 8:45:20 PM Detected: PDM.Suspicious driver installation PointBla
Proactive Defense
Proactive Defense
8/15/2010 6:39:21 PM Detected: PDM.Keylogger Audition Keylogger activi
Proactive Defense
8/15/2010 11:05:18 AM Detected: PDM.Keylogger Audition Keylogger activi
8/15/2010 10:34:50 AM Allowed: PDM.Suspicious driver installation Audition
D:\AYODANCE\AUDITION.EXE
8/15/2010 10:34:30 AM Detected: PDM.Suspicious driver installation Audition
8/15/2010 9:46:59 AM Detected: PDM.Keylogger PointBlank Keylogger activi
8/15/2010 9:46:55 AM Allowed: PDM.Suspicious driver installation PointBla
8/15/2010 9:46:46 AM Detected: PDM.Suspicious driver installation PointBla
8/15/2010 6:37:11 AM Detected: PDM.Keylogger Absent Keylogger activity
Proactive Defense
Proactive Defense
Proactive Defense
License (events: 6)
8/15/2010 9:37:54 PM Application is not activated Kaspersky Internet Secur
ity
ity
ity
8/15/2010 6:28:37 AM Invalid key Kaspersky Internet Security
8/15/2010 6:28:37 AM Application is not activated Kaspersky Internet Secur
ity
ity
Firewall (events: 6)
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
IM Anti-Virus (events: 6)
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
Objects Scan (events: 16)
8/15/2010 6:00:53 PM Task completed Kaspersky Internet Security
Rootkit Scan
Rootkit Scan
Quick Scan
Quick Scan
8/15/2010 9:37:10 AM Task stopped Kaspersky Internet Security
Full Scan
Full Scan
8/15/2010 7:02:47 AM Task completed Kaspersky Internet Security
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Virus Scan
Virus Scan
Rootkit Scan
Rootkit Scan
Full Scan
Full Scan
My Update Center (events: 28)
8/15/2010 6:43:20 PM Task cannot be started Kaspersky Internet Security
My Update Center License is missing
8/15/2010 11:43:53 AM Task cannot be started Kaspersky Internet Security
My Update Center Not all components were updated
My Update Center
My Update Center
My Update Center Operation cancelled by the user
My Update Center
Date: Last week (events: 1577)
8/22/2010 11:16:11 PM Threats have been detected Kaspersky Internet Secur
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
8/22/2010 11:17:07 PM Deleted: Net-Worm.Win32.Kido.ih Generic Host Process for
Win32 Services E:\autorun.inf
8/22/2010 11:16:11 PM Detected: Net-Worm.Win32.Kido.ih Generic Host Pro
cess for Win32 Services E:\autorun.inf
8/22/2010 8:45:23 PM Deleted: Net-Worm.Win32.Kido.ih Generic Host Process for
Win32 Services F:\autorun.inf
8/22/2010 8:44:57 PM Detected: Net-Worm.Win32.Kido.ih Generic Host Pro
cess for Win32 Services F:\autorun.inf
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Application Control
Application Control
Application Control
Application Control
8/21/2010 3:58:50 PM Denied: Start driver Absent Start driver C:\WINDO
8/21/2010 3:54:48 PM Allowed: Pausing other processes and threads DrWatson
8/21/2010 3:54:48 PM Allowed: Pausing other processes and threads Microsof
8/21/2010 3:54:48 PM Allowed: Code intrusion DrWatson Postmortem Debugger
8/21/2010 3:54:48 PM Allowed: Setting debug privileges DrWatson Postmor
Application Control
8/21/2010 7:41:01 PM Microsoft Windows Malicious Software Removal Too
l Placed in group Trusted Signed by the digital signature of entrusted man
ufacturers
8/21/2010 7:40:40 PM MRTSTUB.EXE Placed in group Trusted Signed b
8/21/2010 7:40:28 PM windows-kb890830-v3.10.exe Placed in group
8/21/2010 7:40:16 PM Windows Control Panel Placed in group Trusted
Application Control
8/21/2010 5:09:45 PM Allowed: Setting debug privileges CROSSFIRE.EXE
8/21/2010 5:09:45 PM Allowed: Direct access to physical memory CROSSFIR
E.EXE Access to global memory Direct access to physical memory
WS\SYSTEM32\XDVA349.SYS Start driver
8/21/2010 5:09:41 PM Allowed: Using system program interfaces (DNS) CROSSFIR
E.EXE Use DNS caching system for conversion patch.crossfire.web.id Using sy
8/21/2010 5:09:29 PM Allowed: Using system program interfaces (DNS) HGWC.exe
Use DNS caching system for conversion patch.crossfire.web.id Using system pro
8/21/2010 5:09:26 PM Allowed: Using system program interfaces (DNS) patcher_
cf2.exe Use DNS caching system for conversion patch.crossfire.web.id Using sy
8/21/2010 5:09:20 PM Allowed: Using system program interfaces (DNS) TODO: <F
Application Control
Application Control
Application Control
Application Control
Application Control
Application Control
Application Control
8/20/2010 11:44:04 AM Allowed: Setting debug privileges CROSSFIRE.EXE
8/20/2010 11:44:03 AM Allowed: Direct access to physical memory CROSSFIR
8/20/2010 11:44:03 AM Allowed: Using system program interfaces (DNS) CROSSFIR
8/20/2010 11:43:56 AM Allowed: Using system program interfaces (DNS) HGWC.exe
8/20/2010 11:43:54 AM Allowed: Using system program interfaces (DNS) patcher_
8/20/2010 11:43:41 AM Allowed: Pausing other processes and threads DrWatson
8/20/2010 11:43:41 AM Allowed: Code intrusion DrWatson Postmortem Debugger
8/20/2010 11:43:41 AM Allowed: Setting debug privileges DrWatson Postmor
8/20/2010 11:43:38 AM Allowed: Pausing other processes and threads Microsof
Application Control
8/20/2010 11:10:46 AM DJ_SF_03_D2500_PRODUCTCONTEXT.MSI Placed i
Application Control
Application Control
Application Control
Application Control
Application Control
Application Control
Application Control
Application Control
Application Control
Application Control
Application Control
Application Control
8/17/2010 8:08:44 PM Allowed: Using system program interfaces (DNS) CK2.EXE
Use DNS caching system for conversion gamenoticeck2.lytogame.com Using sy
8/17/2010 8:08:39 PM CK2.EXE Placed in group Low Restricted High val
ue of threat rating calculated heuristically
8/17/2010 2:37:51 PM XTRAP.XT Placed in group Trusted Signed b
8/17/2010 2:31:13 PM HGWC.exe Placed in group Trusted Signed b
Application Control
8/17/2010 9:24:35 AM Firefox Helper Placed in group Trusted Signed b
8/17/2010 9:23:53 AM UPDATER.EXE Placed in group Trusted Signed b
Application Control
8/17/2010 8:57:25 AM MSI33B.TMP Placed in group Trusted Known on
RealUpgrade Launcher Using program interfaces of other process c:\progr
am files\real\realupgrade\realupgrade.exe Using program interfaces of othe
r process
8/17/2010 7:05:48 AM Allowed: Using system program interfaces (DNS) RealUpgr
ade Launcher Use DNS caching system for conversion client-software.real.com
Internet Explorer Using program interfaces of other process c:\progr
am files\internet explorer\iexplore.exe Using program interfaces of other proces
s
8/17/2010 7:05:42 AM Allowed: Access to internal browser data Internet
Explorer Access to internal browser data Access to internal brows
er data
8/17/2010 7:05:31 AM Allowed: Using system program interfaces (DNS) Internet
Explorer Use DNS caching system for conversion ayodance.com Using sy
s
8/17/2010 7:05:25 AM Allowed: Using system program interfaces (DNS) Internet
Explorer Use DNS caching system for conversion www.taazu.com Using sy
8/17/2010 7:05:23 AM Allowed: Use command line of browser Audition
Use command line of browser HTTP://AYODANCE.COM/ Use command line of brow
ser
Application Control
8/17/2010 5:50:01 AM RBSOLNUPDATE.EXE Placed in group Low Rest
8/17/2010 5:49:54 AM RBSOLNUPDATEENU.3.3.0.EXE Placed in group
8/17/2010 5:49:29 AM Hewlett-Packard Product Assistant Placed i
Application Control
8/16/2010 8:29:26 PM Windows TaskManager Placed in group Trusted
8/16/2010 8:24:24 PM Microsoft(C) Register Server Placed in group
Application Control
8/16/2010 5:31:20 PM MSI1663.TMP Placed in group Trusted Known on
8/16/2010 3:55:00 PM Paint Placed in group Trusted Signed by the di
8/16/2010 3:42:08 PM Microsoft Office Word Placed in group Trusted
8/16/2010 1:24:19 PM patcher_cf2.exe Placed in group Trusted Signed b
Application Control
8/16/2010 12:20:26 PM MSIFD.TMP Placed in group Trusted Known on
8/16/2010 12:20:24 PM 2007 Microsoft Office component Placed in group
Application Control
8/16/2010 9:42:25 AM HP Software Update Client Placed in group
8/16/2010 9:37:25 AM Adobe Gamma Loader Placed in group Trusted
Application Control
8/21/2010 7:15:08 PM Denied Audition Client Patcher Open C:\Program Files
8/21/2010 7:41:18 PM Denied Microsoft Windows Malicious Software Removal Too
l Open C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\
avp.exe
8/21/2010 3:51:51 PM Denied DrWatson Postmortem Debugger Open C:\Progr
8/20/2010 12:45:18 PM Denied HGWC.exe Open C:\Program Files\Kaspers
8/18/2010 3:21:35 PM Denied Firefox Open C:\Program Files\Kaspersky Lab\K
8/17/2010 5:46:04 AM Denied Firefox Open C:\Program Files\Kaspersky Lab\K
8/16/2010 9:43:15 AM Denied WMI Open C:\Program Files\Kaspersky Lab\K
8/16/2010 9:37:22 AM Denied Kaspersky Internet Security Modification
REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP9\Trace\Default
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
8/21/2010 3:59:36 PM Allowed: PDM.Suspicious driver installation Audition
8/21/2010 3:59:34 PM Detected: PDM.Suspicious driver installation Audition
Proactive Defense
Proactive Defense
8/21/2010 5:11:24 PM Detected: PDM.Keylogger CROSSFIRE.EXE Keylogger activi
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
8/20/2010 11:44:30 AM Detected: PDM.Keylogger CROSSFIRE.EXE Keylogger activi
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
8/16/2010 8:31:26 PM Detected: PDM.Keylogger PBLauncher Keylogger activi
8/16/2010 8:31:26 PM Detected: PDM.Keylogger PBLauncher Keylogger activi
8/16/2010 8:31:24 PM Allowed: PDM.Suspicious driver installation PBLaunch
er D:\GEMSCOOL\POINT BLANK\PBLAUNCHER.EXE
8/16/2010 8:31:21 PM Detected: PDM.Suspicious driver installation PBLaunch
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
License (events: 34)
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
ity
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
Rootkit Scan
Rootkit Scan
Virus Scan
Virus Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Virus Scan
Virus Scan
Rootkit Scan
Rootkit Scan
Virus Scan
Virus Scan
Rootkit Scan
Rootkit Scan
Virus Scan
Virus Scan
Rootkit Scan
Rootkit Scan
Virus Scan
Virus Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Virus Scan
Virus Scan
Virus Scan
Virus Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Date: Monday (events: 159)
ity
ity
File Anti-Virus
File Anti-Virus
File Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Anti-Spam
Anti-Spam
Anti-Spam
Application Control
Application Control
8/23/2010 1:39:51 AM FLASHPLAYERUPDATE.EXE Placed in group Trusted
8/23/2010 1:38:08 AM NPSWF32_FlashUtil.exe Placed in group Trusted
Application Control
8/23/2010 1:29:59 AM Windows NT High Contrast Invocation Placed i
8/23/2010 12:09:13 AM 4shared Desktop Setup Placed in group Low Rest
8/23/2010 4:59:14 PM Denied Disk Defragmenter NTFS Module Open C:\Progr
8/23/2010 1:39:53 AM Denied FLASHPLAYERUPDATE.EXE Open C:\Program Files
8/23/2010 12:05:54 AM Denied Internet Explorer Open C:\Program Files
Proactive Defense
Proactive Defense
Proactive Defense
License (events: 3)
ity
ity
ity
Firewall
Firewall
Firewall
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Date: Tuesday (events: 154)
ity
ity
ity
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Application Control
Application Control
Application Control
Application Control
Application Control
Application Control
8/24/2010 11:46:14 PM Denied Kaspersky Internet Security Modification
REGISTRY\MACHINE\SOFTWARE\KasperskyLab\protected\AVP9\Trace\Default
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
License (events: 6)
ity
ity
ity
ity
ity
ity
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Date: Wednesday (events: 195)
ity
ity
ity
ity
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Application Control
Application Control
Application Control
Application Control
Application Control
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
License (events: 5)
ity
ity
ity
ity
ity
Firewall
Firewall
Firewall
Firewall
Firewall
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Date: Thursday (events: 285)
ity
ity
ity
ity
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
Application Control
Application Control
Application Control
Application Control
Application Control
Application Control
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
8/26/2010 12:52:14 AM Detected: PDM.Keylogger PBLauncher Keylogger activi
8/26/2010 12:52:14 AM Detected: PDM.Keylogger PBLauncher Keylogger activi
8/26/2010 12:51:54 AM Allowed: PDM.Suspicious driver installation PBLaunch
8/26/2010 12:51:49 AM Detected: PDM.Suspicious driver installation PBLaunch
Proactive Defense
License (events: 6)
ity
ity
ity
ity
ity
ity
Firewall
Firewall
Firewall
Firewall
Firewall
Firewall
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Date: Yesterday (events: 261)
ity
ity
ity
File Anti-Virus
File Anti-Virus
File Anti-Virus
File Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Mail Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Web Anti-Virus
Anti-Spam
Anti-Spam
Anti-Spam
Anti-Spam
8/27/2010 10:03:39 PM Allowed: Using program interfaces of other process
RealUpgrade Launcher Using program interfaces of other process c:\progr
am files\real\realupgrade\realupgrade.exe Using program interfaces of othe
r process
8/27/2010 10:03:35 PM Allowed: Using system program interfaces (DNS) RealUpgr
ade Launcher Use DNS caching system for conversion client-software.real.com
8/27/2010 10:03:34 PM Allowed: Access to password storage Internet Explore
r Access to protected storage Access to password storage
s
8/27/2010 10:03:28 PM Allowed: Access to internal browser data Internet
Explorer Access to internal browser data Access to internal brows
er data
8/27/2010 10:03:23 PM Allowed: Using system program interfaces (DNS) Internet
Explorer Use DNS caching system for conversion ayodance.com Using sy
s
8/27/2010 10:03:18 PM Allowed: Using system program interfaces (DNS) Internet
Explorer Use DNS caching system for conversion www.taazu.com Using sy
8/27/2010 10:03:17 PM Allowed: Use command line of browser Audition
Use command line of browser HTTP://AYODANCE.COM Use command line of brow
ser
Application Control
Application Control
Application Control
Application Control
8/27/2010 7:35:43 PM Denied Firefox Open C:\Program Files\Kaspersky Lab\K
Proactive Defense
Proactive Defense
Proactive Defense
Proactive Defense
License (events: 4)
ity
ity
ity
ity
Firewall
Firewall
Firewall
Firewall
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
IM Anti-Virus
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Full Scan
Virus Scan
Virus Scan
Full Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Rootkit Scan
Date: Today (events: 84)
8/28/2010 3:54:53 AM Microsoft Help Center Service Placed in group
Full Scan
Full Scan

Virus

Hochgeladen von

Dokumentinformationen

Originalbeschreibung:

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

Virus

Hochgeladen von

Copyright:

Verfügbare Formate

Date: Two weeks ago (events: 524)

My Protection (events: 11)

Das könnte Ihnen auch gefallen