Sie sind auf Seite 1von 71

Date: Last week (events: 571) 24/03/2012 12:33:28 p.m.

Protection Center Protection is not runnin g Kaspersky PURE 24/03/2012 12:23:57 p.m. Application Control Resource and Per formance Monitor Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 24/03/2012 12:21:20 p.m. Protection Center Your computer is protect ed Kaspersky PURE 24/03/2012 12:21:03 p.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 24/03/2012 12:21:02 p.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 24/03/2012 12:21:02 p.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 24/03/2012 12:21:02 p.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 24/03/2012 12:21:02 p.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 24/03/2012 12:21:02 p.m. Application Control Task started Kaspersk y PURE Application Control 24/03/2012 12:21:02 p.m. Firewall Task started Kaspersky PURE Firewall 24/03/2012 12:21:02 p.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 24/03/2012 12:21:02 p.m. Anti-Spam Task started Kaspersky PURE Anti-Spam 24/03/2012 12:18:48 p.m. Application Control NSD2EB.TMP Application moved to group Trusted Known on the database of the known softw are 24/03/2012 12:16:55 p.m. Application Control WinDirStat Porta ble Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 24/03/2012 12:14:45 p.m. Application Control Windows Task Man ager Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 24/03/2012 11:59:16 a.m. Objects Scan Task started Kaspersky PURE Rootkit Scan 24/03/2012 11:55:37 a.m. Application Control Volume Mixer Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 24/03/2012 11:30:51 a.m. Application Control Plugin Container for Firefox Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 24/03/2012 11:30:20 a.m. Application Control Firefox Applicat ion moved to group Trusted Signed by the digital signature of entrusted man ufacturers 24/03/2012 11:29:14 a.m. Protection Center Your computer is protect ed Kaspersky PURE 24/03/2012 11:29:14 a.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 24/03/2012 11:29:14 a.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 24/03/2012 11:29:14 a.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 24/03/2012 11:29:14 a.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 24/03/2012 11:29:14 a.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 24/03/2012 11:29:14 a.m. Application Control Task started Kaspersk y PURE Application Control

24/03/2012 11:29:14 a.m. Firewall Task started Kaspersky PURE Firewall 24/03/2012 11:29:14 a.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 24/03/2012 11:29:14 a.m. Anti-Spam Task started Kaspersky PURE Anti-Spam 24/03/2012 11:16:03 a.m. Protection Center Could not enable some pr otection components Kaspersky PURE 24/03/2012 11:16:00 a.m. Mail Anti-Virus Unable to start tasks Kaspersk y PURE Mail Anti-Virus Unexpected error 24/03/2012 11:16:00 a.m. IM Anti-Virus Unable to start tasks Kaspersk y PURE IM Anti-Virus Unexpected error 24/03/2012 11:16:00 a.m. Firewall Unable to start tasks Kaspersk y PURE Firewall Error code: 80000057 24/03/2012 11:16:00 a.m. Anti-Spam Unable to start tasks Kaspersk y PURE Anti-Spam Task disabled 24/03/2012 11:15:55 a.m. Protection Center Could not enable some pr otection components Kaspersky PURE 24/03/2012 11:15:47 a.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 24/03/2012 11:15:47 a.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 24/03/2012 11:15:47 a.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 24/03/2012 11:15:47 a.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 24/03/2012 11:15:47 a.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 24/03/2012 11:15:47 a.m. Application Control Task started Kaspersk y PURE Application Control 24/03/2012 11:15:47 a.m. Firewall Task started Kaspersky PURE Firewall 24/03/2012 11:15:47 a.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 24/03/2012 11:15:47 a.m. Anti-Spam Task started Kaspersky PURE Anti-Spam 24/03/2012 10:57:25 a.m. Protection Center Protection is not runnin g Kaspersky PURE 24/03/2012 10:55:47 a.m. Update Center Task started Kaspersky PURE Update Center 24/03/2012 10:41:24 a.m. Protection Center Your computer is protect ed Kaspersky PURE 24/03/2012 10:40:29 a.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 24/03/2012 10:40:29 a.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 24/03/2012 10:40:29 a.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 24/03/2012 10:40:29 a.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 24/03/2012 10:40:29 a.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 24/03/2012 10:40:29 a.m. Application Control Task started Kaspersk y PURE Application Control 24/03/2012 10:40:29 a.m. Firewall Task started Kaspersky PURE Firewall 24/03/2012 10:40:29 a.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 24/03/2012 10:40:29 a.m. Anti-Spam Task started Kaspersky PURE Anti-Spam

24/03/2012 02:19:13 a.m. g Kaspersky PURE 24/03/2012 01:30:43 a.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 24/03/2012 01:30:43 a.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 24/03/2012 01:28:41 a.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 24/03/2012 01:28:41 a.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 24/03/2012 01:28:39 a.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 24/03/2012 01:28:39 a.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 24/03/2012 01:28:39 a.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 24/03/2012 01:28:39 a.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 24/03/2012 01:28:39 a.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 24/03/2012 01:28:34 a.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 24/03/2012 01:25:43 a.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 24/03/2012 01:25:42 a.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 24/03/2012 01:25:42 a.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 24/03/2012 01:25:35 a.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 24/03/2012 12:35:47 a.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 24/03/2012 12:35:19 a.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 24/03/2012 12:35:19 a.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 24/03/2012 12:35:15 a.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 24/03/2012 12:35:15 a.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 23/03/2012 11:12:44 p.m.

Protection Center

Protection is not runnin

File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error Update Center Task started Kaspersky PURE

Update Center 23/03/2012 11:03:22 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 23/03/2012 11:03:20 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 23/03/2012 11:03:19 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 23/03/2012 11:03:19 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 23/03/2012 11:03:18 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 23/03/2012 11:03:18 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 23/03/2012 11:03:18 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 23/03/2012 11:03:17 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 23/03/2012 11:03:11 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 23/03/2012 11:03:10 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 23/03/2012 11:03:10 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 23/03/2012 11:03:10 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 23/03/2012 11:03:10 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 23/03/2012 11:01:52 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 23/03/2012 11:01:52 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 23/03/2012 11:00:01 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 23/03/2012 11:00:01 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 23/03/2012 11:00:00 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 23/03/2012 10:59:59 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 23/03/2012 10:59:59 p.m. h CryptoStorage Protected

File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service

error error error error error error error error error error error error error error error error error error error error

InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa

rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 10:59:58 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 10:59:57 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 10:59:57 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 10:59:57 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 10:59:55 p.m. Application Control Windows Device I nstallation Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 23/03/2012 10:59:54 p.m. Application Control Driver Installat ion Module Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 23/03/2012 10:59:54 p.m. Application Control Add Hardware Dev ice Library Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 23/03/2012 10:59:54 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 10:57:51 p.m. Application Control PresentationFont Cache.exe Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 23/03/2012 10:57:43 p.m. Application Control WBFS Manager Application moved to group Trusted Known on the database of the known softw are 23/03/2012 10:57:17 p.m. Application Control SETUP.EXE Application moved to group Low Restricted High value of threat rating calc ulated heuristically 23/03/2012 10:57:08 p.m. Application Control 7-Zip GUI Application moved to group Trusted Known on the database of the known softw are 23/03/2012 10:42:33 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 10:42:33 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 10:40:53 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 10:40:53 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 10:40:53 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 10:40:52 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 10:40:52 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 10:40:48 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa

rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 09:14:12 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 08:53:07 p.m. Update Center Task started Kaspersky PURE Update Center 23/03/2012 08:40:16 p.m. File Anti-Virus Processing error Microsof t Outlook M:\MMXII-1Q2Q-TEF-email.pst Read error 23/03/2012 08:36:21 p.m. Application Control Preview Handler Surrogate Host Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 23/03/2012 08:19:53 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 08:19:49 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 07:58:13 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 07:56:22 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 07:56:22 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 07:56:22 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 07:55:50 p.m. Application Control Skype Applicat ion moved to group Trusted Signed by the digital signature of entrusted man ufacturers 23/03/2012 07:55:47 p.m. Application Control Skype Portable Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 23/03/2012 07:33:32 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 07:32:23 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 07:32:23 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 07:31:55 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 07:31:50 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 04:33:06 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 04:33:04 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 04:33:01 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 03:09:29 p.m. File Anti-Virus Processing error InfoWatc

h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 03:09:28 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 03:09:27 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 03:09:27 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 03:09:26 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 03:09:25 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 03:09:24 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 03:09:24 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 03:09:24 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 03:09:23 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 03:09:23 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 03:08:45 p.m. Application Control TeamViewer Remot e Control Application Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 23/03/2012 03:08:13 p.m. Application Control Helper process f or TeamViewer performance optimization and QuickConnect Application moved to gro up Trusted Signed by the digital signature of entrusted manufacturers 23/03/2012 03:08:10 p.m. Application Control TeamViewer Remot e Control Application Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 23/03/2012 03:08:02 p.m. Application Control TeamViewer Remot e Control Application Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 23/03/2012 03:08:00 p.m. Application Control NSBBE9.TMP Application moved to group Trusted Known on the database of the known softw are 23/03/2012 03:07:37 p.m. Application Control MPSIGSTUB.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 23/03/2012 03:07:35 p.m. Application Control MPAS-FE_BD.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 23/03/2012 03:07:30 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 03:07:19 p.m. Application Control TeamViewer_.exe Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 23/03/2012 03:07:15 p.m. Application Control TeamViewer_Setup

.exe Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 23/03/2012 03:00:07 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 03:00:06 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:57:32 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:55:34 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:55:34 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:55:32 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:55:32 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:55:32 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:55:32 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:55:31 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:55:31 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:55:31 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:53:20 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:53:19 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:53:18 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:53:16 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:53:16 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:53:14 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:53:14 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:53:14 p.m. File Anti-Virus Processing error InfoWatc

h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:53:13 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:53:12 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:53:10 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:53:04 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:53:03 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:29:14 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:29:10 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 02:19:46 p.m. Update Center Task started Kaspersky PURE Update Center 23/03/2012 01:54:16 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 01:52:16 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 01:52:15 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 01:52:15 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 01:51:08 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 01:50:48 p.m. Application Control Allowed: Setting debug p rivileges PHOTO COLLAGE SCREENSAVER.MSI Setting debug privileges Setting debug privileges 23/03/2012 01:50:48 p.m. Application Control Allowed: Exiting Microso ft Windows PHOTO COLLAGE SCREENSAVER.MSI Windows shutdown Exiting Microsoft Windows 23/03/2012 01:50:47 p.m. Application Control PHOTO COLLAGE SC REENSAVER.MSI Application moved to group Low Restricted High value of th reat rating calculated heuristically 23/03/2012 01:50:41 p.m. Application Control Setup Launcher U nicode Application moved to group Low Restricted High value of threat rat ing calculated heuristically 23/03/2012 01:35:48 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 01:35:48 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 01:35:47 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa

rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 01:35:46 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 01:35:45 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 01:35:44 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 01:35:44 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 12:53:38 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 12:34:40 p.m. Application Control Microsoft Volume Shadow Copy Service Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 23/03/2012 12:34:38 p.m. Application Control Microsoft Windows System Protection Configuration Library Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 23/03/2012 12:34:38 p.m. Application Control MUI Language pac k cleanup Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 23/03/2012 12:34:38 p.m. Application Control Autochk Proxy DL L Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 23/03/2012 12:27:38 p.m. Application Control Program Compatib ility Data Updater Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 23/03/2012 12:27:37 p.m. Application Control Application Impa ct Telemetry Agent Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 23/03/2012 12:18:30 p.m. Update Center Task started Kaspersky PURE Update Center 23/03/2012 11:49:49 a.m. Application Control Disk Defragmente r Module Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 23/03/2012 11:13:11 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 11:11:11 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 23/03/2012 11:11:07 a.m. Application Control Transitions Acce ssible technologies between desktops Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 23/03/2012 10:17:00 a.m. Update Center Task started Kaspersky PURE Update Center 23/03/2012 09:52:35 a.m. Application Control Microsoft Visio Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 23/03/2012 09:39:34 a.m. File Anti-Virus Processing error Microsof t Outlook M:\MMXII-1Q2Q-TEF-email.pst Read error 23/03/2012 08:45:08 a.m. Application Control Utility Manager Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 23/03/2012 08:45:07 a.m. Application Control Microsoft Screen Magnifier Application moved to group Trusted Signed by the digital si

gnature of entrusted manufacturers 23/03/2012 08:42:12 a.m. Objects Scan Task completed Kaspersky PURE Rootkit Scan 23/03/2012 08:35:13 a.m. Objects Scan Task started Kaspersky PURE Rootkit Scan 23/03/2012 08:11:41 a.m. Application Control Free Download Ma nager Application moved to group Trusted Known on the database of the kno wn software 23/03/2012 08:03:07 a.m. Application Control Shockwave Flash 11.1 r102 Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 23/03/2012 08:01:06 a.m. Application Control Allowed: Start driver Absent Start driver D:\PORTABLEAPPS\TRUECRYPT\TRUECRYPT.SYS Start driver 23/03/2012 07:58:26 a.m. Update Center Task started Kaspersky PURE Update Center 23/03/2012 07:57:52 a.m. Protection Center Your computer is protect ed Kaspersky PURE 23/03/2012 07:57:26 a.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 23/03/2012 07:57:25 a.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 23/03/2012 07:57:25 a.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 23/03/2012 07:57:25 a.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 23/03/2012 07:57:25 a.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 23/03/2012 07:57:25 a.m. Application Control Task started Kaspersk y PURE Application Control 23/03/2012 07:57:25 a.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 23/03/2012 07:57:25 a.m. Firewall Task started Kaspersky PURE Firewall 23/03/2012 07:57:25 a.m. Anti-Spam Task started Kaspersky PURE Anti-Spam 23/03/2012 07:56:31 a.m. Protection Center Protection is not runnin g Kaspersky PURE 23/03/2012 07:55:50 a.m. Application Control wmi helper Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 23/03/2012 07:50:05 a.m. Application Control Microsoft(C) Reg ister Server Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 23/03/2012 07:50:04 a.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 23/03/2012 07:50:04 a.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 23/03/2012 07:50:04 a.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 23/03/2012 07:50:04 a.m. Protection Center Your computer is protect ed Kaspersky PURE 23/03/2012 07:50:04 a.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 23/03/2012 07:50:04 a.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 23/03/2012 07:50:04 a.m. Application Control Task started Kaspersk y PURE Application Control 23/03/2012 07:50:03 a.m. Firewall Task started Kaspersky PURE Firewall 23/03/2012 07:50:03 a.m. File Anti-Virus Task started Kaspersky PURE

File Anti-Virus 23/03/2012 07:50:03 a.m. Anti-Spam Task started Kaspersky PURE Anti-Spam 23/03/2012 07:50:00 a.m. Protection Center Protection is not runnin g Kaspersky PURE 23/03/2012 07:47:20 a.m. Application Control Allowed: Start driver Absent Start driver D:\PORTABLEAPPS\TRUECRYPT\TRUECRYPT.SYS Start driver 23/03/2012 07:46:01 a.m. Update Center Task started Kaspersky PURE Update Center 23/03/2012 07:46:01 a.m. Update Center Task stopped Kaspersky PURE Update Center Operation cancelled by the user 23/03/2012 07:45:33 a.m. Update Center Task started Kaspersky PURE Update Center 23/03/2012 07:45:20 a.m. Protection Center Your computer is protect ed Kaspersky PURE 23/03/2012 07:44:07 a.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 23/03/2012 07:44:07 a.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 23/03/2012 07:44:07 a.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 23/03/2012 07:44:07 a.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 23/03/2012 07:44:07 a.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 23/03/2012 07:44:07 a.m. Application Control Task started Kaspersk y PURE Application Control 23/03/2012 07:44:07 a.m. Firewall Task started Kaspersky PURE Firewall 23/03/2012 07:44:07 a.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 23/03/2012 07:44:07 a.m. Anti-Spam Task started Kaspersky PURE Anti-Spam 23/03/2012 07:42:56 a.m. Protection Center Protection is not runnin g Kaspersky PURE 23/03/2012 07:42:32 a.m. Application Control Windows Problem Reporting Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 23/03/2012 07:42:10 a.m. Application Control Kaspersky Dump W riter Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 23/03/2012 07:40:36 a.m. Update Center Task started Kaspersky PURE Update Center 23/03/2012 07:39:32 a.m. Application Control Microsoft Resourc e File To COFF Object Conversion Utility Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 23/03/2012 07:39:28 a.m. Application Control Visual C# Comman d Line Compiler Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 23/03/2012 07:38:43 a.m. Application Control Google Chrome Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 23/03/2012 07:38:21 a.m. Protection Center Your computer is protect ed Kaspersky PURE 23/03/2012 07:38:08 a.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 23/03/2012 07:38:08 a.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 23/03/2012 07:38:08 a.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus

23/03/2012 07:38:07 a.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 23/03/2012 07:38:07 a.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 23/03/2012 07:38:07 a.m. Application Control Task started Kaspersk y PURE Application Control 23/03/2012 07:38:07 a.m. Firewall Task started Kaspersky PURE Firewall 23/03/2012 07:38:07 a.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 23/03/2012 07:38:07 a.m. Anti-Spam Task started Kaspersky PURE Anti-Spam 22/03/2012 10:38:32 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 10:37:28 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 10:37:26 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 10:37:24 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 10:37:18 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:03:00 p.m. Application Control Google Crash Han dler Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 22/03/2012 08:58:27 p.m. Application Control GOOGLEUPDATE.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 22/03/2012 08:58:18 p.m. Application Control GOOGLEUPDATESETU P.EXE Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 22/03/2012 07:20:36 p.m. Application Control VLC media player 2.0.0 Application moved to group Trusted Known on the database of the kno wn software 22/03/2012 07:20:36 p.m. Application Control UNetbootin - Uni versal Netboot Installer - http://unetbootin.sourceforge.net Application move d to group Trusted Known on the database of the known software 22/03/2012 06:02:00 p.m. Application Control Microsoft Pen an d Touch Input Component Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 22/03/2012 06:01:58 p.m. Application Control Snipping Tool Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 22/03/2012 04:56:03 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 04:54:03 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 04:54:03 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 04:54:03 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error

22/03/2012 04:06:44 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 22/03/2012 04:06:44 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 22/03/2012 04:06:43 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 22/03/2012 04:06:43 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 22/03/2012 04:06:41 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 22/03/2012 04:06:41 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 22/03/2012 04:06:40 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 22/03/2012 04:06:40 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 22/03/2012 03:54:35 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 22/03/2012 03:52:35 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 22/03/2012 03:52:35 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 22/03/2012 03:52:35 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 22/03/2012 03:19:50 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 22/03/2012 03:19:49 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 22/03/2012 03:19:48 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 22/03/2012 03:19:47 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 22/03/2012 03:19:45 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 22/03/2012 03:19:44 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 22/03/2012 03:09:02 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 22/03/2012 03:09:01 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION

File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error

error error error error error error error error error error error error error error error error error error error error

InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa

22/03/2012 03:09:00 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 03:08:59 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 03:08:58 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 03:08:58 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 03:08:57 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 03:08:57 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 03:08:02 p.m. Application Control SETUP.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 22/03/2012 03:08:00 p.m. Application Control Google Chrome Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 22/03/2012 03:07:59 p.m. Application Control CHROME_UPDATER.E XE Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 22/03/2012 03:07:07 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 03:07:07 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 03:06:42 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 03:06:41 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 03:06:41 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 03:06:39 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 11:58:21 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 11:36:38 a.m. Application Control Notepad Applicat ion moved to group Trusted Signed by the digital signature of entrusted man ufacturers 22/03/2012 11:27:19 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 11:25:20 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 11:25:20 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error

22/03/2012 11:25:19 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 11:25:19 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 11:25:19 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 11:25:15 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 11:25:14 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 11:25:13 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 11:25:13 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 11:25:11 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 11:25:10 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 11:25:07 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 10:58:04 a.m. Application Control PuTTY Tab Manage r Application moved to group Low Restricted High value of threat rat ing calculated heuristically 22/03/2012 10:08:15 a.m. Application Control Notepad++ : a fr ee (GNU) source code editor Application moved to group Trusted Known on the database of the known software 22/03/2012 10:08:14 a.m. Application Control Notepad++ Portab le Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 22/03/2012 10:00:00 a.m. Application Control Microsoft Windows Backup Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 22/03/2012 09:43:46 a.m. Application Control WebToolBar compo nent Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 22/03/2012 09:43:37 a.m. Application Control Adobe Flash Player Installer/Uninstaller 10.2 r153 Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 22/03/2012 09:43:29 a.m. Application Control Internet Explore r Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 22/03/2012 09:40:09 a.m. Application Control Microsoft Common Language Runtime native compiler Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 22/03/2012 09:39:54 a.m. Application Control MSI3E1F.TMP Application moved to group Low Restricted High value of threat rating calc ulated heuristically 22/03/2012 09:39:13 a.m. Application Control Google Installer Application moved to group Trusted Signed by the digital signature of entru sted manufacturers

22/03/2012 09:19:55 a.m. Application Control Adobe Acrobat Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 22/03/2012 09:19:49 a.m. Application Control SwitchBoard Serv er (32 bit) Application moved to group Trusted Known on the database of the known software 22/03/2012 09:11:53 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:09:38 a.m. Application Control SSH, Telnet and Rlogin client Application moved to group Trusted Known on the database of the known software 22/03/2012 09:09:36 a.m. Application Control PuTTY Portable ( PortableApps.com Launcher) Application moved to group Trusted Signed b y the digital signature of entrusted manufacturers 22/03/2012 09:09:11 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:07:14 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:07:13 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:07:11 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:07:11 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:07:11 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:07:11 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:07:11 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:07:11 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:07:11 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:06:37 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:06:36 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:06:34 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:06:33 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:06:33 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error

22/03/2012 09:06:33 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:06:32 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:06:32 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:06:03 a.m. Application Control GOOGLECRASHHANDL ER.EXE Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 22/03/2012 09:05:41 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:05:41 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:05:40 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:05:40 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:05:39 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 09:05:37 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 08:42:42 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 08:42:26 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 08:42:26 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 08:26:37 a.m. Application Control WMI Performance Reverse Adapter Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 22/03/2012 08:26:30 a.m. Application Control Google Talk Plug in Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 22/03/2012 08:25:21 a.m. Application Control Adobe Reader Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 22/03/2012 08:24:46 a.m. Application Control Microsoft Word Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 22/03/2012 08:17:20 a.m. Application Control Microsoft Excel Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 22/03/2012 08:12:06 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 08:12:05 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error

22/03/2012 08:12:03 a.m. Application Control Microsoft Office Software Protection Platform Service Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 22/03/2012 08:09:09 a.m. Application Control Microsoft Outloo k Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 22/03/2012 08:08:30 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 08:08:30 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 08:08:29 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 08:08:27 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 08:08:25 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 08:07:31 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 08:07:30 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 08:07:30 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 08:07:15 a.m. Application Control Allowed: Start driver Absent Start driver D:\PORTABLEAPPS\TRUECRYPT\TRUECRYPT.SYS Start driver 22/03/2012 08:07:12 a.m. Application Control TrueCrypt Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 22/03/2012 07:55:10 a.m. Objects Scan Task completed Kaspersky PURE Rootkit Scan 22/03/2012 07:49:34 a.m. Objects Scan Task started Kaspersky PURE Rootkit Scan 22/03/2012 07:47:21 a.m. Application Control UN4652.EXE Application moved to group Trusted Known on the database of the known softw are 22/03/2012 07:33:00 a.m. Application Control SRWare Iron Application moved to group Trusted Known on the database of the known softw are 22/03/2012 07:32:59 a.m. Application Control Iron Portable (P ortableApps.com Launcher) Application moved to group Trusted Signed b y the digital signature of entrusted manufacturers 22/03/2012 07:29:44 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 07:29:44 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 07:27:14 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 07:27:14 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error

22/03/2012 07:26:54 a.m. Application Control VLC media player 2.0.0 Application moved to group Trusted Known on the database of the kno wn software 22/03/2012 07:25:20 a.m. Application Control Allowed: Start driver Absent Start driver C:\WINDOWS\SYSTEM32\EPMNTDRV.SYS Start driver 22/03/2012 07:24:37 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 07:24:36 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 07:24:35 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 07:24:34 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 07:24:32 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 07:24:23 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 07:24:22 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 07:24:21 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 07:24:21 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 07:24:20 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 07:24:18 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 07:23:20 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 22/03/2012 07:19:41 a.m. Protection Center Your computer is protect ed Kaspersky PURE 22/03/2012 07:19:30 a.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 22/03/2012 07:19:29 a.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 22/03/2012 07:19:29 a.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 22/03/2012 07:19:29 a.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 22/03/2012 07:19:29 a.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 22/03/2012 07:19:29 a.m. Application Control Task started Kaspersk y PURE Application Control 22/03/2012 07:19:29 a.m. Firewall Task started Kaspersky PURE Firewall 22/03/2012 07:19:29 a.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 22/03/2012 07:19:29 a.m. Anti-Spam Task started Kaspersky PURE

Anti-Spam 22/03/2012 07:19:21 a.m. License management License validity period expires soon Kaspersky PURE 21/03/2012 08:45:18 p.m. Protection Center Protection is not runnin g Kaspersky PURE 21/03/2012 08:44:36 p.m. Application Control Allowed: Low level disk access UN5872.EXE Low level disk access Device\HarddiskVolume4 Low leve l disk access 21/03/2012 08:44:36 p.m. Application Control UN5872.EXE Application moved to group Low Restricted High value of threat rating calc ulated heuristically 21/03/2012 08:37:14 p.m. Objects Scan Task completed Kaspersky PURE Rootkit Scan 21/03/2012 08:30:49 p.m. Application Control SEVNZ.EXE Application moved to group Low Restricted High value of threat rating calc ulated heuristically 21/03/2012 08:30:01 p.m. Objects Scan Task started Kaspersky PURE Rootkit Scan 21/03/2012 08:25:01 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 21/03/2012 08:24:22 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 21/03/2012 08:23:43 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 21/03/2012 08:23:06 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 21/03/2012 08:22:43 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 21/03/2012 08:22:19 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 21/03/2012 08:21:47 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 21/03/2012 08:21:23 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 21/03/2012 08:20:59 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 21/03/2012 08:15:46 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 21/03/2012 08:15:46 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 21/03/2012 08:11:15 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 21/03/2012 08:11:15 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 21/03/2012 08:07:43 p.m. Application Control Virtual Disk Ser vice Application moved to group Trusted Signed by the digital signature of entrusted manufacturers

21/03/2012 08:07:43 p.m. Application Control Virtual Disk Ser vice Loader Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 21/03/2012 08:07:43 p.m. Application Control Allowed: Start driver Absent Start driver C:\WINDOWS\SYSTEM32\EPMNTDRV.SYS Start driver 21/03/2012 08:07:36 p.m. Application Control EASEUS Partition Master Main Application Application moved to group Trusted Signed b y the digital signature of entrusted manufacturers 21/03/2012 08:07:30 p.m. Application Control EASEUS Partition Master Loader Application Application moved to group Trusted Signed b y the digital signature of entrusted manufacturers 21/03/2012 08:03:51 p.m. Application Control WMI Reverse Perf ormance Adapter Maintenance Utility Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 21/03/2012 08:03:05 p.m. Application Control Alcohol Launcher Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 21/03/2012 08:03:01 p.m. Application Control DAEMON Tools Lit e Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 21/03/2012 08:03:00 p.m. Application Control ApMsgFwd Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 21/03/2012 08:02:59 p.m. Application Control Adobe CS5.5 Serv ice Manager Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 21/03/2012 08:02:59 p.m. Application Control SwitchBoard Serv er (32 bit) Application moved to group Low Restricted High value of th reat rating calculated heuristically 21/03/2012 08:02:58 p.m. Application Control Adobe Updater St artup Utility Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 21/03/2012 08:02:56 p.m. Application Control WMI Provider Hos t Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 21/03/2012 08:02:56 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 21/03/2012 08:02:37 p.m. Application Control Microsoft Office 2010 component Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 21/03/2012 08:02:37 p.m. Application Control NVIDIA Display P roperties Extension Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 21/03/2012 08:02:15 p.m. Application Control NVIDIA nView Wiz ard, Version 121.05 Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 21/03/2012 08:02:07 p.m. Application Control icacls.exe Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 21/03/2012 08:02:05 p.m. Application Control .NET Runtime Opt imization Service Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 21/03/2012 08:01:53 p.m. Application Control GOOGLECRASHHANDL ER.EXE Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 21/03/2012 08:01:30 p.m. Application Control Userinit Logon A pplication Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 21/03/2012 08:01:07 p.m. Application Control Windows NT Multi

ple Provider Notification Application Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 21/03/2012 07:59:54 p.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 21/03/2012 07:59:52 p.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 21/03/2012 07:59:52 p.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 21/03/2012 07:59:52 p.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 21/03/2012 07:59:52 p.m. Application Control Task started Kaspersk y PURE Application Control 21/03/2012 07:59:52 p.m. Firewall Task started Kaspersky PURE Firewall 21/03/2012 07:59:52 p.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 21/03/2012 07:59:52 p.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 21/03/2012 07:59:52 p.m. Anti-Spam Task started Kaspersky PURE Anti-Spam 21/03/2012 07:52:44 p.m. Protection Center Protection is not runnin g Kaspersky PURE 21/03/2012 07:26:20 p.m. Application Control Blank Screen Sav er Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 21/03/2012 07:25:15 p.m. Application Control UN23089.EXE Application moved to group Trusted Known on the database of the known softw are 21/03/2012 07:22:44 p.m. Application Control Fences Settings Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 21/03/2012 07:16:19 p.m. Application Control Windows Logon Us er Interface Host Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 21/03/2012 07:11:55 p.m. Application Control SEVNZ.EXE Application moved to group Trusted Known on the database of the known softw are 21/03/2012 07:10:37 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 21/03/2012 07:10:37 p.m. Application Control InfoWatch Crypto Storage Protected objects controller service Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 21/03/2012 07:09:32 p.m. Application Control Consent UI for a dministrative applications Application moved to group Trusted Signed b y the digital signature of entrusted manufacturers 21/03/2012 07:09:32 p.m. Application Control UNetbootin - Uni versal Netboot Installer - http://unetbootin.sourceforge.net Application move d to group Trusted Known on the database of the known software 21/03/2012 07:09:22 p.m. Application Control PortableApps.com Updater Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 21/03/2012 07:09:14 p.m. Application Control Acrobat Distill er Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 21/03/2012 07:09:13 p.m. Application Control PortableApps.com Platform Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 21/03/2012 07:06:44 p.m. Objects Scan Task completed Kaspersky PURE Rootkit Scan

21/03/2012 07:00:59 p.m. Objects Scan Task started Kaspersky PURE Rootkit Scan 21/03/2012 06:58:00 p.m. Application Control Google Installer Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 21/03/2012 06:55:01 p.m. Application Control Google Installer Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 21/03/2012 06:55:00 p.m. Application Control Task Scheduler E ngine Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 21/03/2012 06:43:03 p.m. Application Control Microsoft Sync C enter Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 21/03/2012 06:43:01 p.m. Application Control Windows Shell Co mmon Dll Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 21/03/2012 06:42:32 p.m. Update Center Task started Kaspersky PURE Update Center 21/03/2012 06:41:44 p.m. Update Center Task failed Kaspersky PURE Update Center Update files are corrupted 21/03/2012 06:41:43 p.m. Update Center Task started Kaspersky PURE Update Center 21/03/2012 06:39:47 p.m. Application Control Shockwave Flash 11.1 r102 Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 21/03/2012 06:35:33 p.m. Application Control Windows Problem Reporting Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 21/03/2012 06:34:48 p.m. Application Control COM Surrogate Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 21/03/2012 06:33:48 p.m. Protection Center Databases are obsolete Kaspersky PURE 21/03/2012 06:33:48 p.m. Update Center Task failed Kaspersky PURE Update Center Update files are corrupted 21/03/2012 06:33:48 p.m. Update Center Task started Kaspersky PURE Update Center 21/03/2012 06:33:23 p.m. Protection Center Automatic updates are di sabled Kaspersky PURE 21/03/2012 06:30:52 p.m. Application Control Windows Audio De vice Graph Isolation Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 21/03/2012 06:30:52 p.m. Application Control Kaspersky Anti-V irus GUI Windows part Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 21/03/2012 06:30:51 p.m. Application Control Microsoft Window s Search Filter Host Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 21/03/2012 06:30:51 p.m. Application Control Windows Update Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 21/03/2012 06:30:51 p.m. Application Control Kaspersky PURE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 21/03/2012 06:30:51 p.m. Application Control Windows Modules Installer Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 21/03/2012 06:30:51 p.m. Application Control Windows installer Application moved to group Trusted Signed by the digital signature of entru

sted manufacturers 21/03/2012 06:30:51 p.m. Application Control DAEMON Tools She ll Extensions Helper Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 21/03/2012 06:30:51 p.m. Application Control Microsoft Window s Search Protocol Host Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 21/03/2012 06:30:51 p.m. Application Control Console Window H ost Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 21/03/2012 06:30:51 p.m. Application Control Alps Pointing-de vice Driver for Windows NT/2000/XP/Vista Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 21/03/2012 06:30:51 p.m. Application Control Alps Pointing-de vice Driver Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 21/03/2012 06:30:50 p.m. Application Control Microsoft Window s Search Indexer Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 21/03/2012 06:30:50 p.m. Application Control Microsoft OneNot e Quick Launcher Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 21/03/2012 06:30:50 p.m. Application Control Google Chrome Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 21/03/2012 06:30:50 p.m. Application Control Windows Desktop Gadgets Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 21/03/2012 06:30:50 p.m. Application Control Alps Pointing-de vice Driver Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 21/03/2012 06:30:50 p.m. Application Control AcroTray Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 21/03/2012 06:30:50 p.m. Application Control NVIDIA Hotkey Se rvice, Version 186.21 Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 21/03/2012 06:30:50 p.m. Application Control SR_GUI.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 21/03/2012 06:30:50 p.m. Application Control Windows Explorer Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 21/03/2012 06:30:50 p.m. Application Control Desktop Window M anager Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 21/03/2012 06:30:50 p.m. Application Control Host Process for Windows Tasks Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 21/03/2012 06:30:49 p.m. Application Control StarWind iSCSI T arget (Alcohol Edition) Application moved to group Trusted Known on the dat abase of the known software 21/03/2012 06:30:49 p.m. Application Control Microsoft Softwa re Protection Platform Service Application moved to group Trusted Signed b y the digital signature of entrusted manufacturers 21/03/2012 06:30:49 p.m. Application Control McAfee Process V alidation Service Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 21/03/2012 06:30:49 p.m. Application Control Spooler SubSyste m App Application moved to group Trusted Signed by the digital signature

of entrusted manufacturers 21/03/2012 06:30:49 p.m. Application Control SR_WATCHDOG.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 21/03/2012 06:30:49 p.m. Application Control SR_SERVICE.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 21/03/2012 06:30:49 p.m. Application Control Windows Driver F oundation - User-mode Driver Framework Host Process Application moved to gro up Trusted Signed by the digital signature of entrusted manufacturers 21/03/2012 06:30:48 p.m. Application Control NVIDIA Driver He lper Service, Version 186.21 Application moved to group Trusted Signed b y the digital signature of entrusted manufacturers 21/03/2012 06:30:48 p.m. Application Control Host Process for Windows Services Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 21/03/2012 06:30:48 p.m. Application Control Windows Logon Ap plication Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 21/03/2012 06:30:48 p.m. Application Control Local Session Ma nager Service Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 21/03/2012 06:30:48 p.m. Application Control Local Security A uthority Process Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 21/03/2012 06:30:48 p.m. Application Control Services and Con troller app Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 21/03/2012 06:30:48 p.m. Application Control Windows Start-Up Application Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 21/03/2012 06:30:48 p.m. Application Control Client Server Ru ntime Process Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 21/03/2012 06:30:48 p.m. Application Control Windows Session Manager Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 21/03/2012 06:30:47 p.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 21/03/2012 06:30:47 p.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 21/03/2012 06:30:47 p.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 21/03/2012 06:30:47 p.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 21/03/2012 06:30:47 p.m. Application Control Task started Kaspersk y PURE Application Control 21/03/2012 06:30:47 p.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 21/03/2012 06:30:47 p.m. Firewall Task started Kaspersky PURE Firewall 21/03/2012 06:30:47 p.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 21/03/2012 06:30:47 p.m. Anti-Spam Task started Kaspersky PURE Anti-Spam 21/03/2012 06:30:47 p.m. Protection Center Databases are obsolete Kaspersky PURE Date: Monday (events: 75) 26/03/2012 08:57:54 p.m. Protection Center Protection is not runnin g Kaspersky PURE

26/03/2012 08:27:00 p.m. Update Center Task started Kaspersky PURE Update Center 26/03/2012 07:51:59 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 07:51:59 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 07:51:45 p.m. Application Control Microsoft PowerP oint Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 26/03/2012 07:45:29 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 07:45:27 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 07:03:47 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 07:00:26 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 07:00:26 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 07:00:26 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 07:00:25 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 07:00:25 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 07:00:25 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 07:00:22 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 07:00:22 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 04:09:22 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 04:04:45 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 04:04:45 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 04:04:45 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 04:04:12 p.m. Application Control Paint Applicat ion moved to group Trusted Signed by the digital signature of entrusted man ufacturers 26/03/2012 03:56:21 p.m. File Anti-Virus Processing error InfoWatc

h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 26/03/2012 03:54:23 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 26/03/2012 03:54:23 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 26/03/2012 03:54:21 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 26/03/2012 03:54:21 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 26/03/2012 03:54:21 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 26/03/2012 03:54:21 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 26/03/2012 03:54:21 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 26/03/2012 03:54:20 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 26/03/2012 03:53:29 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 26/03/2012 03:53:29 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 26/03/2012 03:53:28 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 26/03/2012 03:53:27 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 26/03/2012 03:53:26 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 26/03/2012 03:53:25 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 26/03/2012 03:53:24 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 26/03/2012 03:53:20 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 26/03/2012 12:44:07 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 26/03/2012 12:44:00 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 26/03/2012 12:43:52 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 26/03/2012 12:42:07 p.m.

objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing

C:\$Extend\$Repa error error error error error error error error error error error error error error error error error error error error InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc

h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 12:42:07 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 12:42:06 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 12:07:58 p.m. Update Center Task started Kaspersky PURE Update Center 26/03/2012 10:59:36 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 10:59:35 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 10:59:34 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 10:59:34 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 10:59:32 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 10:59:32 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 10:59:31 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 10:59:31 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 10:55:35 a.m. Application Control TCP/IP Ping Comm and Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 26/03/2012 10:55:34 a.m. Application Control Windows Time Ser vice Diagnostic Tool Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 26/03/2012 10:55:20 a.m. Application Control Scripted Diagnos tics Native Host Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 26/03/2012 10:50:19 a.m. Application Control Power Settings C ommand-Line Tool Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 26/03/2012 10:21:40 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 10:19:41 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 26/03/2012 10:08:53 a.m. Objects Scan Task completed Kaspersky PURE Rootkit Scan 26/03/2012 10:01:46 a.m. Objects Scan Task started Kaspersky PURE Rootkit Scan 26/03/2012 10:00:00 a.m. Application Control Adobe Acrobat Sp eedLauncher Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 26/03/2012 10:00:00 a.m. Application Control Adobe Reader and

Acrobat Manager Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 26/03/2012 09:46:58 a.m. Update Center Task started Kaspersky PURE Update Center 26/03/2012 09:34:50 a.m. Application Control Allowed: Start driver Absent Start driver D:\PORTABLEAPPS\TRUECRYPT\TRUECRYPT.SYS Start driver 26/03/2012 09:32:00 a.m. Protection Center Your computer is protect ed Kaspersky PURE 26/03/2012 09:31:39 a.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 26/03/2012 09:31:39 a.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 26/03/2012 09:31:39 a.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 26/03/2012 09:31:39 a.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 26/03/2012 09:31:39 a.m. Firewall Task started Kaspersky PURE Firewall 26/03/2012 09:31:39 a.m. Application Control Task started Kaspersk y PURE Application Control 26/03/2012 09:31:39 a.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 26/03/2012 09:31:39 a.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 26/03/2012 09:31:39 a.m. Anti-Spam Task started Kaspersky PURE Anti-Spam Date: Tuesday (events: 129) 27/03/2012 11:37:10 p.m. Update Center Task started Kaspersky PURE Update Center 27/03/2012 11:11:05 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 09:35:57 p.m. Update Center Task started Kaspersky PURE Update Center 27/03/2012 09:35:45 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 09:35:42 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 06:33:17 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 06:33:16 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 06:12:14 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 05:54:07 p.m. Update Center Task started Kaspersky PURE Update Center 27/03/2012 04:13:50 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 04:11:51 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 04:11:50 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error

27/03/2012 04:11:50 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 04:11:50 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 04:11:50 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 04:11:50 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 04:11:45 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 04:11:44 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 04:11:43 p.m. Application Control Microsoft .NET E rror Reporting Shim Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 27/03/2012 04:11:42 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 04:11:40 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 04:11:38 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 04:11:37 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 04:11:35 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 04:11:33 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:37:12 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:37:12 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:36:48 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:36:47 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:36:46 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:34:34 p.m. Application Control Broker for Vista Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 27/03/2012 03:33:08 p.m. Update Center Task started Kaspersky PURE Update Center 27/03/2012 03:28:01 p.m. Application Control Windows Command

Processor Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 27/03/2012 03:27:27 p.m. Application Control Dropbox Applicat ion moved to group Trusted Signed by the digital signature of entrusted man ufacturers 27/03/2012 03:27:20 p.m. Application Control Network Command Shell Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 27/03/2012 03:27:12 p.m. Application Control NSCECF.TMP Application moved to group Trusted Known on the database of the known softw are 27/03/2012 03:25:07 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:25:07 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:21:37 p.m. Application Control Cisco WebEx Serv ice Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 27/03/2012 03:21:35 p.m. Application Control atcliun Applicat ion moved to group Trusted Signed by the digital signature of entrusted man ufacturers 27/03/2012 03:20:59 p.m. Application Control Dropbox 1.2.52 I nstaller Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 27/03/2012 03:18:39 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:18:38 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:16:42 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:16:41 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:16:39 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:16:39 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:16:39 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:16:38 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:16:38 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:16:38 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:12:58 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:12:57 p.m. File Anti-Virus Processing error InfoWatc

h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:12:57 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:12:56 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:12:55 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:12:55 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:12:54 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:11:10 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:11:10 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:11:10 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:10:26 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 03:10:23 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 11:01:38 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 11:01:35 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 10:14:30 a.m. Application Control Microsoft Malwar e Protection Signature Update Stub Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 27/03/2012 10:14:29 a.m. Application Control MPMINISIGSTUB.EX E Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 27/03/2012 10:14:27 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 10:14:26 a.m. Application Control mpas-d_bd1.exe Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 27/03/2012 10:14:19 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 09:54:19 a.m. Application Control Internet Extensi ons for Win32 Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 27/03/2012 09:45:51 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 09:44:22 a.m. Update Center Task started Kaspersky PURE

Update Center 27/03/2012 09:44:09 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 09:44:07 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 09:43:52 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 27/03/2012 09:03:04 a.m. File Anti-Virus Processing error Microsof t Windows Search Protocol Host M:\MMXII-1Q2Q-TEF-email.pst Read err or 27/03/2012 09:02:10 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:ITwhitepapers.com Resources][Subject:Extend your VMware Cl oud Infrastructure with a Private PaaS][Time:2011/11/02 09:12:00] Content analysis (iBayes) 27/03/2012 09:02:09 a.m. Anti-Spam Spam message Microsoft Outloo k [From:Connected Planet Offers][Subject:The Upside of Real-Time N otification][Time:2011/11/02 11:04:12] Heuristic analysis 27/03/2012 09:02:02 a.m. Anti-Spam Spam message Microsoft Outloo k [From:Windows IT Pro][Subject:November Schedule of Events][Time: 2011/10/30 06:17:33] Heuristic analysis 27/03/2012 09:02:00 a.m. Anti-Spam Spam message Microsoft Outloo k [From:Violet Simon][Subject:Consiga todos sus necesidades de luj o aqui'][Time:2011/10/31 09:31:03] Heuristic analysis 27/03/2012 09:01:47 a.m. Anti-Spam Spam message Microsoft Outloo k [From:Gracie Lee][Subject:Regalos originales para el an~o nuevo! ][Time:2011/10/31 19:56:57] Heuristic analysis 27/03/2012 09:01:29 a.m. Anti-Spam Spam message Microsoft Outloo k [From:Connected Planet][Subject:Webinar: FCC legislates on bill shock, but how will it be implemented?][Time:2011/10/18 09:29:31] Heuristi c analysis 27/03/2012 09:01:20 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:Visual Network Systems][Subject:Learn How to Assess the Co st of Application Performance Issues][Time:2011/10/06 03:27:06] Content analysis (iBayes) 27/03/2012 09:01:13 a.m. Anti-Spam Spam message Microsoft Outloo k [From:Connected Planet][Subject:Best of 4G Awards: An insider's view on the finalists, trends][Time:2011/10/06 16:45:09] Heuristic analys is 27/03/2012 09:01:08 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:ITwhitepapers][Subject:The Friday Five][Time:2011/10/07 09 :35:00] Content analysis (iBayes) 27/03/2012 09:01:06 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:ITwhitepapers][Subject:The Friday Five][Time:2011/10/07 09 :35:00] Content analysis (iBayes) 27/03/2012 09:00:51 a.m. Anti-Spam Spam message Microsoft Outloo k [From:Connected Planet][Subject:Limited Time: The Top Email Thre ats Beyond Spam][Time:2011/10/11 08:46:12] Heuristic analysis 27/03/2012 09:00:42 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:Spiceworks][Subject:Remotely uninstall software, keep Exch ange under control, and more!][Time:2011/09/30 01:05:08] Content analysis (iBayes) 27/03/2012 09:00:41 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:IDG Connect ][Subject:Business Intelligence: BPM - Forrest er Research - OLAP][Time:2011/09/30 02:42:09] Content analysis (iBayes) 27/03/2012 09:00:39 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:IDG Connect ][Subject:Business Intelligence: BPM - Forrest er Research - OLAP][Time:2011/09/30 02:43:00] Content analysis (iBayes)

27/03/2012 09:00:31 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:ITwhitepapers][Subject:The Friday Five][Time:2011/09/30 09 :30:00] Content analysis (iBayes) 27/03/2012 09:00:30 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:ITwhitepapers][Subject:The Friday Five][Time:2011/09/30 09 :30:00] Content analysis (iBayes) 27/03/2012 09:00:16 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:no-reply@mailpit.powerweb.de][Subject:DNSBL: unsolicited e mail from your network 190.57.79.0][Time:2011/10/04 08:24:15] Content analysis (iBayes) 27/03/2012 09:00:11 a.m. Anti-Spam Spam message Microsoft Outloo k [From:Connected Planet][Subject:Boost revenue by using real-time offers, alerts, and interactions.][Time:2011/10/04 08:34:31] Heuristic analys is 27/03/2012 08:59:55 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:Breaking News][Subject:New iPhone Announcement Does What C ompetitors Cannot - Shuts down the Apple Website - Breaking News][Time:2011/10/0 4 16:48:16] Content analysis (iBayes) 27/03/2012 08:59:49 a.m. Anti-Spam Spam message Microsoft Outloo k [From:Connected Planet][Subject:Order Management at the Speed of Business][Time:2011/10/05 09:55:30] Heuristic analysis 27/03/2012 08:59:36 a.m. Anti-Spam Spam message Microsoft Outloo Courtesy k [From:Connected Planet][Subject:Connected Planet Survey Reminder][Time:2011/09/28 08:04:05] Heuristic analysis 27/03/2012 08:59:34 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:Check Point Software Technologies Ltd.][Subject:Securing t he Dynamic Virtualized Environment with Check Point][Time:2011/09/28 08:09:58] Content analysis (iBayes) 27/03/2012 08:59:14 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:IDG Connect ][Subject:Women in IT: Trends on the Web & in the Workplace][Time:2011/07/29 02:39:50] Content analysis (iBayes) 27/03/2012 08:59:13 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:IDG Connect ][Subject:Women in IT: Trends on the Web & in the Workplace][Time:2011/07/29 02:38:56] Content analysis (iBayes) 27/03/2012 08:58:55 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:Spiceworks][Subject:Important email changes coming your wa y!][Time:2011/08/03 01:13:27] Content analysis (iBayes) 27/03/2012 08:58:53 a.m. Anti-Spam Spam message Microsoft Outloo k [From:Billie Gaines][Subject:Sale without recipes. Bring in 2-3 days .Gastrointestinal. Allergies. Gastrointestinal][Time:2011/08/03 10:22:08] Heuristic analysis 27/03/2012 08:58:50 a.m. Anti-Spam Spam message Microsoft Outloo k [From:Son Corona][Subject:Re: Branded items at clearance prices] [Time:2011/08/03 10:42:14] Heuristic analysis 27/03/2012 08:58:46 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:IDG Connect ][Subject:Global Differences: Content, Mobile & Business Strategies][Time:2011/08/05 02:56:26] Content analysis (iBayes ) 27/03/2012 08:58:41 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:Ismael Valencia][Subject:The Resurgence of Boy-in-the-Brow ser Attacks][Time:2011/08/11 14:46:47] Content analysis (iBayes) 27/03/2012 08:58:31 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:IDG Connect ][Subject:20 Years of the Web: How it is Helpi ng Business Today][Time:2011/08/12 02:56:37] Content analysis (iBayes) 27/03/2012 08:58:22 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:IDG Connect ][Subject:IT Skills, Summer 2011: 'Talentism'] [Time:2011/08/26 02:26:44] Content analysis (iBayes) 27/03/2012 08:58:20 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:IDG Connect ][Subject:IT Skills, Summer 2011: Research, Op inion, Analysis][Time:2011/08/26 02:41:57] Content analysis (iBayes)

27/03/2012 08:57:53 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:ITwhitepapers.com Resources][Subject:Top 10 Myths About Vi rtualizing Business-Critical Applications][Time:2011/09/07 10:30:09] Content analysis (iBayes) 27/03/2012 08:00:00 a.m. Application Control Google Crash Han dler Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 27/03/2012 07:55:37 a.m. Application Control Interactive serv ices detection Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 27/03/2012 07:55:23 a.m. Application Control GOOGLEUPDATE.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 27/03/2012 07:55:23 a.m. Application Control GOOGLEUPDATESETU P.EXE Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 27/03/2012 07:51:03 a.m. Objects Scan Task completed Kaspersky PURE Rootkit Scan 27/03/2012 07:47:24 a.m. Application Control Accessibility sh ortcut keys Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 27/03/2012 07:43:19 a.m. Objects Scan Task started Kaspersky PURE Rootkit Scan 27/03/2012 07:28:31 a.m. Update Center Task started Kaspersky PURE Update Center 27/03/2012 07:21:37 a.m. Application Control Allowed: Start driver Absent Start driver D:\PORTABLEAPPS\TRUECRYPT\TRUECRYPT.SYS Start driver 27/03/2012 07:13:27 a.m. Protection Center Your computer is protect ed Kaspersky PURE 27/03/2012 07:13:16 a.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 27/03/2012 07:13:14 a.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 27/03/2012 07:13:14 a.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 27/03/2012 07:13:14 a.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 27/03/2012 07:13:14 a.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 27/03/2012 07:13:14 a.m. Application Control Task started Kaspersk y PURE Application Control 27/03/2012 07:13:14 a.m. Firewall Task started Kaspersky PURE Firewall 27/03/2012 07:13:14 a.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 27/03/2012 07:13:14 a.m. Anti-Spam Task started Kaspersky PURE Anti-Spam Date: Wednesday (events: 128) 28/03/2012 08:24:13 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 08:23:16 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 08:22:11 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 08:22:05 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error

28/03/2012 08:07:07 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 08:07:05 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 07:47:21 p.m. Update Center 28/03/2012 07:24:51 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 07:24:48 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 07:24:46 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 07:24:46 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 07:20:09 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 07:20:09 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 07:20:07 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 06:30:10 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 06:30:10 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 06:30:09 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 06:30:07 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 06:30:07 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 06:08:05 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 06:08:05 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 06:08:03 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 05:40:22 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 05:40:21 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 05:40:20 p.m.

File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error Update Center Task started Kaspersky PURE File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing error error error error error error error error error error error error error error error error error error InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc

h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 05:40:19 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 05:40:18 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 05:40:18 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 05:40:17 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 05:40:17 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 05:30:42 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 05:30:40 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 05:30:35 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 05:26:51 p.m. Update Center 28/03/2012 04:38:50 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 04:38:49 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 04:38:49 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 04:38:49 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 04:38:48 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 04:38:47 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 04:38:46 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 04:38:46 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 04:23:52 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 04:23:51 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 04:23:50 p.m. h CryptoStorage Protected

objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error Update Center Task started Kaspersky PURE File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service error error error error error error error error error error error InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa

rse:$R:$INDEX_ALLOCATION 28/03/2012 04:16:57 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 04:16:56 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 04:16:56 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 04:16:54 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 04:16:53 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 04:16:53 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 04:16:52 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 03:23:15 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 03:23:15 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 03:23:15 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 03:18:24 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 03:18:23 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 03:18:23 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 03:18:02 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 03:18:01 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 03:17:59 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 03:17:57 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 03:17:55 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 03:17:55 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 28/03/2012 03:17:54 p.m. h CryptoStorage Protected

Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service

error error error error error error error error error error error error error error error error error error error error

InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa

rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 03:17:54 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 03:17:53 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 03:17:52 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 03:17:51 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 03:17:48 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 03:06:00 p.m. Update Center Task started Kaspersky PURE Update Center 28/03/2012 02:33:49 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 02:33:48 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 02:33:47 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 02:33:47 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 02:33:47 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 02:33:46 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 02:33:45 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 02:33:44 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 02:33:43 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 01:05:00 p.m. Update Center Task started Kaspersky PURE Update Center 28/03/2012 12:15:24 p.m. Application Control PV.EXE Applicat ion moved to group Trusted Known on the database of the known software 28/03/2012 11:58:05 a.m. Application Control Microsoft Projec t Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 28/03/2012 11:27:53 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 11:25:51 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 11:25:50 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa

rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 11:25:49 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 11:07:49 a.m. Application Control xampp-control-3beta.exe Application moved to group Trusted Known on the database of the known software 28/03/2012 11:07:11 a.m. Application Control AWK.EXE Applicat ion moved to group Trusted Known on the database of the known software 28/03/2012 11:07:07 a.m. Application Control CLI Applicat ion moved to group Trusted Known on the database of the known software 28/03/2012 11:07:06 a.m. Application Control SETUP_XAMPP.BAT Application moved to group Trusted Known on the database of the known softw are 28/03/2012 11:06:14 a.m. Objects Scan Task completed Kaspersky PURE Rootkit Scan 28/03/2012 11:06:14 a.m. Application Control MYSQLD.EXE Application moved to group Trusted Known on the database of the known softw are 28/03/2012 11:06:11 a.m. Application Control Apache HTTP Serv er Application moved to group Trusted Known on the database of the kno wn software 28/03/2012 11:06:08 a.m. Application Control XAMPP Control Pa nel for Windows Application moved to group Trusted Known on the database of the known software 28/03/2012 11:06:06 a.m. Application Control XAMPP Control Pa nel Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 28/03/2012 10:58:22 a.m. Objects Scan Task started Kaspersky PURE Rootkit Scan 28/03/2012 10:43:44 a.m. Update Center Task started Kaspersky PURE Update Center 28/03/2012 10:35:14 a.m. File Anti-Virus Processing error Microsof t Outlook P:\MMXI-3Q4Q-TEF-email.pst Read error 28/03/2012 10:31:54 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 10:31:54 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 10:31:09 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 28/03/2012 10:29:53 a.m. Application Control Allowed: Start driver Absent Start driver D:\PORTABLEAPPS\TRUECRYPT\TRUECRYPT.SYS Start driver 28/03/2012 10:28:31 a.m. Protection Center Your computer is protect ed Kaspersky PURE 28/03/2012 10:28:12 a.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 28/03/2012 10:28:10 a.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 28/03/2012 10:28:10 a.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 28/03/2012 10:28:10 a.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 28/03/2012 10:28:10 a.m. Firewall Task started Kaspersky PURE Firewall 28/03/2012 10:28:10 a.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 28/03/2012 10:28:10 a.m. Application Control Task started Kaspersk

y PURE Application Control 28/03/2012 10:28:10 a.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 28/03/2012 10:28:10 a.m. Anti-Spam Task started Kaspersky PURE Anti-Spam 28/03/2012 10:28:06 a.m. License management License validity period expires soon Kaspersky PURE 28/03/2012 08:06:39 a.m. Protection Center Protection is not runnin g Kaspersky PURE 28/03/2012 07:54:43 a.m. Protection Center Your computer is protect ed Kaspersky PURE 28/03/2012 07:54:08 a.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 28/03/2012 07:54:08 a.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 28/03/2012 07:54:08 a.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 28/03/2012 07:54:08 a.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 28/03/2012 07:54:08 a.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 28/03/2012 07:54:08 a.m. Application Control Task started Kaspersk y PURE Application Control 28/03/2012 07:54:08 a.m. Firewall Task started Kaspersky PURE Firewall 28/03/2012 07:54:08 a.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 28/03/2012 07:54:08 a.m. Anti-Spam Task started Kaspersky PURE Anti-Spam 28/03/2012 07:54:06 a.m. License management License validity period expires soon Kaspersky PURE 28/03/2012 12:37:08 a.m. Protection Center Protection is not runnin g Kaspersky PURE 28/03/2012 12:03:19 a.m. License management License validity period expires soon Kaspersky PURE Date: Sunday (events: 45) 25/03/2012 08:15:07 p.m. Protection Center Protection is not runnin g Kaspersky PURE 25/03/2012 08:07:48 p.m. Objects Scan Task completed Kaspersky PURE Rootkit Scan 25/03/2012 07:59:39 p.m. Objects Scan Task started Kaspersky PURE Rootkit Scan 25/03/2012 07:44:45 p.m. Update Center Task started Kaspersky PURE Update Center 25/03/2012 07:41:51 p.m. Application Control Windows Defender User Interface Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 25/03/2012 07:39:20 p.m. Application Control Remote Desktop C onnection Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 25/03/2012 07:29:38 p.m. Protection Center Your computer is protect ed Kaspersky PURE 25/03/2012 07:29:36 p.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 25/03/2012 07:29:36 p.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 25/03/2012 07:29:36 p.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 25/03/2012 07:29:36 p.m. Firewall Task started Kaspersky PURE Firewall

25/03/2012 07:29:36 p.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 25/03/2012 07:29:36 p.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 25/03/2012 07:29:36 p.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 25/03/2012 07:29:36 p.m. Application Control Task started Kaspersk y PURE Application Control 25/03/2012 07:29:36 p.m. Anti-Spam Task started Kaspersky PURE Anti-Spam 25/03/2012 07:29:27 p.m. License management License validity period expires soon Kaspersky PURE 25/03/2012 04:15:57 p.m. Protection Center Protection is not runnin g Kaspersky PURE 25/03/2012 03:46:03 p.m. Update Center Task started Kaspersky PURE Update Center 25/03/2012 03:25:52 p.m. Objects Scan Task completed Kaspersky PURE Rootkit Scan 25/03/2012 03:18:57 p.m. Objects Scan Task started Kaspersky PURE Rootkit Scan 25/03/2012 02:53:36 p.m. Application Control A tool to aid in developing services for WindowsNT Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 25/03/2012 02:49:10 p.m. Protection Center Your computer is protect ed Kaspersky PURE 25/03/2012 02:48:48 p.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 25/03/2012 02:48:48 p.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 25/03/2012 02:48:48 p.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 25/03/2012 02:48:48 p.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 25/03/2012 02:48:48 p.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 25/03/2012 02:48:48 p.m. Application Control Task started Kaspersk y PURE Application Control 25/03/2012 02:48:48 p.m. Firewall Task started Kaspersky PURE Firewall 25/03/2012 02:48:48 p.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 25/03/2012 02:48:48 p.m. Anti-Spam Task started Kaspersky PURE Anti-Spam 25/03/2012 02:48:43 p.m. License management License validity period expires soon Kaspersky PURE 25/03/2012 10:49:01 a.m. Protection Center Protection is not runnin g Kaspersky PURE 25/03/2012 10:48:15 a.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 25/03/2012 10:48:15 a.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 25/03/2012 10:48:15 a.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 25/03/2012 10:48:15 a.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 25/03/2012 10:48:15 a.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 25/03/2012 10:48:15 a.m. Protection Center Your computer is protect ed Kaspersky PURE 25/03/2012 10:48:11 a.m. Application Control Task started Kaspersk

y PURE Application Control 25/03/2012 10:48:11 a.m. Firewall Task started Kaspersky PURE Firewall 25/03/2012 10:48:09 a.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 25/03/2012 10:48:09 a.m. Anti-Spam Task started Kaspersky PURE Anti-Spam 25/03/2012 10:47:48 a.m. License management License validity period expires soon Kaspersky PURE Date: Yesterday (events: 324) 29/03/2012 07:16:31 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 07:16:41 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 07:16:42 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 07:16:45 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 07:16:48 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 07:16:59 a.m. Update Center Task started Kaspersky PURE Update Center 29/03/2012 07:17:31 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 07:17:34 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 07:17:34 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 07:26:12 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 07:26:13 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 07:26:13 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 07:26:14 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 07:26:15 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 07:26:15 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 07:26:16 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 07:26:17 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error

29/03/2012 07:26:17 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 07:26:18 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 07:26:18 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 07:59:34 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 07:59:35 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:23:50 a.m. Application Control DM-338.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 29/03/2012 09:24:39 a.m. Application Control HSS-2.52-INSTALL -P79-338-CONDUIT.EXE Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 29/03/2012 09:24:41 a.m. Application Control HSSINSTALLER.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 29/03/2012 09:24:46 a.m. Application Control FFINST.EXE Application moved to group Trusted Known on the database of the known softw are 29/03/2012 09:24:47 a.m. Application Control HSSINSTALLER.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 29/03/2012 09:24:48 a.m. Application Control HSSINSTALLER.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 29/03/2012 09:24:52 a.m. Application Control Plug and Play Us er Interface DLL Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 29/03/2012 09:25:26 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:25:56 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:25:59 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:26:00 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:26:01 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:26:02 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:26:03 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:26:04 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error

29/03/2012 09:26:11 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:26:19 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:26:23 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:26:26 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:26:28 a.m. Application Control HSSSRV.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 29/03/2012 09:26:30 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:26:32 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:26:33 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:26:35 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:26:36 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:27:00 a.m. Application Control HSSWD.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 29/03/2012 09:27:08 a.m. Application Control hsspk.exe Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 29/03/2012 09:27:09 a.m. Application Control Windows Setup AP I Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 29/03/2012 09:27:12 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:27:19 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:27:39 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:27:42 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:27:42 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:27:42 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:27:42 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error

29/03/2012 09:27:43 a.m. Application Control fwkern.exe Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 29/03/2012 09:27:47 a.m. Application Control CFG_MGR.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 29/03/2012 09:27:48 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:27:50 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:27:50 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:27:55 a.m. Application Control HSSTRAYSERVICE.E XE Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 29/03/2012 09:27:56 a.m. Application Control OPENVPNAS.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 29/03/2012 09:28:00 a.m. Application Control CONDUITINSTALLER .EXE Application moved to group Trusted Known on the database of the kno wn software 29/03/2012 09:28:09 a.m. Application Control TBINST.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 29/03/2012 09:28:16 a.m. Application Control OPENVPNTRAY.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 29/03/2012 09:28:23 a.m. Application Control OPENVPN.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 29/03/2012 09:28:24 a.m. Application Control Conduit Toolbar Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 29/03/2012 09:28:30 a.m. Application Control FFUNZIP.EXE Application moved to group Trusted Known on the database of the known softw are 29/03/2012 09:28:37 a.m. Application Control FBW Application Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 29/03/2012 09:28:39 a.m. Application Control AnchorFree Helpe r Proxy Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 29/03/2012 09:28:42 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:28:51 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:28:51 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:34:46 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:34:46 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error

29/03/2012 09:34:48 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:36:49 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 09:37:30 a.m. Update Center Task started Kaspersky PURE Update Center 29/03/2012 09:53:51 a.m. Application Control ToolbarH Applica tion Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 29/03/2012 10:08:16 a.m. Application Control Recuva Installer Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 29/03/2012 10:08:41 a.m. Application Control NS3649.TMP Application moved to group Trusted Known on the database of the known softw are 29/03/2012 10:08:50 a.m. Application Control Recuva Applicat ion moved to group Trusted Signed by the digital signature of entrusted man ufacturers 29/03/2012 10:58:22 a.m. Objects Scan Task started Kaspersky PURE Rootkit Scan 29/03/2012 11:08:13 a.m. Objects Scan Task completed Kaspersky PURE Rootkit Scan 29/03/2012 11:57:02 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 11:57:05 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 11:57:06 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 11:57:07 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 11:57:07 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 11:57:07 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 11:57:08 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 11:57:08 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 11:57:09 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 11:59:15 a.m. Update Center Task started Kaspersky PURE Update Center 29/03/2012 12:02:49 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:02:49 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:02:50 p.m. File Anti-Virus Processing error InfoWatc

h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:02:56 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:03:02 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:03:02 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:03:04 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:03:04 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:03:04 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:03:06 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:03:06 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:03:07 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:03:07 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:03:08 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:03:09 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:03:09 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:03:10 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:03:11 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:03:11 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:03:11 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:03:13 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:03:14 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:03:59 p.m.

objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error Application Control

C:\$Extend\$Repa error error error error error error error error error error error error error error error error error error error InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa AUTORUN.EXE

Application moved to group Low Restricted High value of threat rating calc ulated heuristically 29/03/2012 12:04:02 p.m. Application Control PROMPTINFO.EXE Application moved to group Trusted Known on the database of the known softw are 29/03/2012 12:04:13 p.m. Application Control DataCard_Setup Application moved to group Low Restricted High value of threat rating calc ulated heuristically 29/03/2012 12:05:19 p.m. Application Control SETUP.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 29/03/2012 12:06:51 p.m. Application Control ImpWiFiSvc Aplic acin Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 29/03/2012 12:06:55 p.m. Application Control setup_driver App lication Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 29/03/2012 12:07:02 p.m. Application Control Setup.exe Application moved to group Trusted Known on the database of the known softw are 29/03/2012 12:07:16 p.m. Application Control DriverSetup.exe Application moved to group Trusted Known on the database of the known softw are 29/03/2012 12:07:18 p.m. Application Control Huawei(R) DevSet up Version 1.0.1.3 for Windows 2K, XP, Vista, Win7. Application moved to gro up Trusted Known on the database of the known software 29/03/2012 12:07:56 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:07:58 p.m. Application Control Allowed: Setting debug p rivileges Huawei(R) DevSetup Version 1.0.1.3 for Windows 2K, XP, Vista, Wi n7. Setting debug privileges Setting debug privileges 29/03/2012 12:08:03 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:08:04 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:08:06 p.m. Application Control Allowed: Setting debug p rivileges DriverSetup.exe Setting debug privileges Setting debug privileges 29/03/2012 12:09:11 p.m. Application Control Nori server Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 29/03/2012 12:09:23 p.m. Application Control Telefnica Group C onnection Manager Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 29/03/2012 12:09:25 p.m. Application Control Allowed: Low level disk access DataCard_Setup Low level disk access Device\CdRom3 Low level disk a ccess 29/03/2012 12:09:26 p.m. Application Control RESETDEVICE.EXE Application moved to group Trusted Known on the database of the known softw are 29/03/2012 12:09:32 p.m. Application Control Allowed: Low level disk access RESETDEVICE.EXE Low level disk access Device\CdRom3 Low level disk a ccess 29/03/2012 12:09:32 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:09:33 p.m. File Anti-Virus Processing error InfoWatc

h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:09:35 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:09:36 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:09:41 p.m. Application Control Sink to receive asynchronous callbacks for WMI client application Application moved to gro up Trusted Signed by the digital signature of entrusted manufacturers 29/03/2012 12:09:41 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:09:42 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:09:58 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:09:58 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:09:59 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:10:42 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:11:05 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:11:43 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:11:46 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:11:46 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:11:46 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:11:46 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:12:04 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:12:04 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:12:05 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:12:08 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:12:08 p.m. File Anti-Virus Processing error InfoWatc

h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:14 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:14 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:23 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:32 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:32 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:35 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:35 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:37 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:37 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:38 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:39 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:39 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:39 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:42 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:43 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:45 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:46 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:46 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:47 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:48 p.m.

objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing

C:\$Extend\$Repa error error error error error error error error error error error error error error error error error error error error InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc

h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:48 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:49 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:49 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:49 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:49 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:49 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:51 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:52 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:54 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:55 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:12:55 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:16:20 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:16:24 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:16:26 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:16:26 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:16:27 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:16:27 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:16:27 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:16:27 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 12:28:41 p.m.

objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error Application Control

C:\$Extend\$Repa error error error error error error error error error error error error error error error error error error error InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa xampp-control-3-

beta.exe Application moved to group Trusted Known on the database of the known software 29/03/2012 12:40:44 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:40:45 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:40:46 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:40:50 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:40:51 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:40:52 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:40:54 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:40:55 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 12:40:55 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 03:23:19 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 03:23:21 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 03:23:30 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 03:23:31 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 03:23:36 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 03:23:49 p.m. Application Control TCP/IP Route Com mand Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 29/03/2012 03:24:30 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 03:24:54 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 03:24:54 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 03:24:55 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 03:24:56 p.m. File Anti-Virus Processing error InfoWatc

h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:24:57 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:24:58 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:24:58 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:24:58 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:25:46 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:25:46 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:25:46 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:25:47 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:25:47 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:25:47 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:25:47 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:25:49 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:25:50 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:27:19 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:27:19 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:27:19 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:27:20 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:27:20 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:27:21 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:27:22 p.m.

objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing

C:\$Extend\$Repa error error error error error error error error error error error error error error error error error error error error InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc

h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:27:23 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:27:23 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:27:37 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:27:37 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:27:37 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:27:37 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:27:37 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:27:40 p.m. Update Center 29/03/2012 03:29:23 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:29:37 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:29:39 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:29:39 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 03:57:44 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 04:07:41 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 04:07:56 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 04:08:02 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 04:08:26 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 04:09:15 p.m. h CryptoStorage Protected rse:$R:$INDEX_ALLOCATION 29/03/2012 04:11:36 p.m. h CryptoStorage Protected rse Read error 29/03/2012 04:11:52 p.m. h CryptoStorage Protected

objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa Read error Update Center Task started Kaspersky PURE File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service Read error File Anti-Virus Processing objects controller service error error error error error error error error error error error InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa InfoWatc C:\$Extend\$Repa

File Anti-Virus Processing error InfoWatc objects controller service C:\$Extend\$Repa

rse Read error 29/03/2012 04:12:23 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse Read error 29/03/2012 04:17:09 p.m. Protection Center Protection is not runnin g Kaspersky PURE 29/03/2012 04:18:47 p.m. Anti-Spam Task started Kaspersky PURE Anti-Spam 29/03/2012 04:18:47 p.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 29/03/2012 04:18:47 p.m. Firewall Task started Kaspersky PURE Firewall 29/03/2012 04:18:47 p.m. Application Control Task started Kaspersk y PURE Application Control 29/03/2012 04:18:47 p.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 29/03/2012 04:18:47 p.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 29/03/2012 04:18:47 p.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 29/03/2012 04:18:47 p.m. Protection Center Your computer is protect ed Kaspersky PURE 29/03/2012 04:18:47 p.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 29/03/2012 04:18:54 p.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 29/03/2012 04:26:13 p.m. Application Control Allowed: Start driver Absent Start driver D:\PORTABLEAPPS\TRUECRYPT\TRUECRYPT.SYS Start driver 29/03/2012 04:28:21 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 04:29:46 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 04:29:47 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 04:30:21 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 04:44:02 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 04:50:40 p.m. Anti-Spam Task started Kaspersky PURE Anti-Spam 29/03/2012 04:50:40 p.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 29/03/2012 04:50:40 p.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 29/03/2012 04:50:42 p.m. Application Control Task started Kaspersk y PURE Application Control 29/03/2012 04:50:42 p.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 29/03/2012 04:50:42 p.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 29/03/2012 04:50:42 p.m. Firewall Task started Kaspersky PURE Firewall 29/03/2012 04:50:42 p.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 29/03/2012 04:50:42 p.m. Web Anti-Virus Task started Kaspersky PURE

Web Anti-Virus 29/03/2012 04:50:54 p.m. Protection Center Your computer is protect ed Kaspersky PURE 29/03/2012 05:00:22 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 05:00:22 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 05:00:22 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 05:00:22 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 05:00:22 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 05:02:22 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 05:03:08 p.m. Application Control Allowed: Start driver Absent Start driver D:\PORTABLEAPPS\TRUECRYPT\TRUECRYPT.SYS Start driver 29/03/2012 05:14:24 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 06:07:56 p.m. Anti-Spam Task started Kaspersky PURE Anti-Spam 29/03/2012 06:07:56 p.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 29/03/2012 06:07:56 p.m. Firewall Task started Kaspersky PURE Firewall 29/03/2012 06:07:56 p.m. Application Control Task started Kaspersk y PURE Application Control 29/03/2012 06:07:56 p.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 29/03/2012 06:07:57 p.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 29/03/2012 06:07:57 p.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 29/03/2012 06:07:57 p.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 29/03/2012 06:07:57 p.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 29/03/2012 06:08:09 p.m. Protection Center Your computer is protect ed Kaspersky PURE 29/03/2012 06:09:04 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 06:10:38 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 06:10:38 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 06:10:38 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 06:10:38 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa

rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 06:12:38 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 29/03/2012 06:31:01 p.m. Protection Center Protection is not runnin g Kaspersky PURE 29/03/2012 11:32:48 p.m. Anti-Spam Task started Kaspersky PURE Anti-Spam 29/03/2012 11:32:48 p.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 29/03/2012 11:32:48 p.m. Firewall Task started Kaspersky PURE Firewall 29/03/2012 11:32:48 p.m. Application Control Task started Kaspersk y PURE Application Control 29/03/2012 11:32:48 p.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 29/03/2012 11:32:48 p.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 29/03/2012 11:32:48 p.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 29/03/2012 11:32:48 p.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 29/03/2012 11:32:48 p.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 29/03/2012 11:32:59 p.m. Proactive Defense Detected: PDM.Keylogger Absent Keylogger activity kernel mode memory patch 29/03/2012 11:32:59 p.m. Proactive Defense Detected: PDM.Keylogger Absent Keylogger activity kernel mode memory patch Action selected by user 29/03/2012 11:33:01 p.m. Protection Center Your computer is protect ed Kaspersky PURE Date: Today (events: 257) 30/03/2012 12:02:51 a.m. Objects Scan Task started Kaspersky PURE Rootkit Scan 30/03/2012 12:10:48 a.m. Objects Scan Task completed Kaspersky PURE Rootkit Scan 30/03/2012 12:36:39 a.m. Protection Center Protection is not runnin g Kaspersky PURE 30/03/2012 08:25:37 a.m. Anti-Spam Task started Kaspersky PURE Anti-Spam 30/03/2012 08:25:37 a.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 30/03/2012 08:25:37 a.m. Firewall Task started Kaspersky PURE Firewall 30/03/2012 08:25:37 a.m. Application Control Task started Kaspersk y PURE Application Control 30/03/2012 08:25:37 a.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 30/03/2012 08:25:37 a.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 30/03/2012 08:25:37 a.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 30/03/2012 08:25:37 a.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 30/03/2012 08:25:37 a.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 30/03/2012 08:25:50 a.m. Protection Center Your computer is protect ed Kaspersky PURE 30/03/2012 08:39:04 a.m. Application Control Allowed: Start driver Absent Start driver D:\PORTABLEAPPS\TRUECRYPT\TRUECRYPT.SYS Start driver

30/03/2012 08:40:53 a.m. Update Center Task started Kaspersky PURE Update Center 30/03/2012 08:42:37 a.m. Anti-Spam Probable spam Microsoft Outloo k [From:IDG Connect ][Subject:The Tough Side of Social Media: Unde rstand the Business Risks][Time:2012/03/30 02:34:00] Content analysis (iBayes ) 30/03/2012 08:52:46 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 08:53:46 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 08:53:50 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 08:53:52 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 08:53:53 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 08:53:53 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 08:55:41 a.m. Objects Scan Task started Kaspersky PURE Rootkit Scan 30/03/2012 09:03:23 a.m. Application Control Windows Calculat or Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 30/03/2012 09:05:24 a.m. Objects Scan Task completed Kaspersky PURE Rootkit Scan 30/03/2012 10:00:45 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:00:47 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:01:02 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:01:03 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:01:11 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:01:12 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:01:13 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:01:14 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:01:14 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:47:18 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa

rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:47:21 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:47:43 a.m. Update Center Task started Kaspersky PURE Update Center 30/03/2012 10:47:55 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:47:55 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:47:55 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:47:55 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:48:13 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:48:14 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:48:14 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:48:15 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:48:16 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:48:17 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:48:38 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:48:40 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:48:40 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:50:46 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:50:53 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:50:53 a.m. Application Control mpas-d_bd1.exe Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 30/03/2012 10:50:54 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 10:50:57 a.m. Application Control MPMINISIGSTUB.EX E Application moved to group Trusted Signed by the digital signature of entrusted manufacturers

30/03/2012 11:02:16 a.m. Application Control SolarWinds Orion IP Address Manager 2.0.1 Evaluation Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 30/03/2012 11:02:49 a.m. Application Control SWREGINST.EXE Application moved to group Trusted Known on the database of the known softw are 30/03/2012 11:03:19 a.m. Application Control RUNTIMEWRAPPER.E XE Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:03:56 a.m. Application Control SOLARWINDS-ORION -IPAM-V2.0.1-FULLWITHSQL.EXE Application moved to group Trusted Signed b y the digital signature of entrusted manufacturers 30/03/2012 11:04:27 a.m. Application Control ORIONINSTALLER.B OOTSTRAPPER.EXE Application moved to group Trusted Known on the database of the known software 30/03/2012 11:04:29 a.m. Application Control ORIONINSTALLER.E XE Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:04:49 a.m. Application Control ADDITIONALPOLLER CHECKER.EXE Application moved to group Low Restricted High value of th reat rating calculated heuristically 30/03/2012 11:05:34 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 11:05:35 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 11:06:01 a.m. Application Control Windows Features Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 30/03/2012 11:06:04 a.m. Application Control Microsoft Cabinet Maker Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 30/03/2012 11:09:39 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 11:10:40 a.m. Application Control IIS Setup Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 30/03/2012 11:10:40 a.m. Application Control Application Serv er Command Line Admin Tool Application moved to group Trusted Signed b y the digital signature of entrusted manufacturers 30/03/2012 11:28:31 a.m. Application Control vcredist_x86.exe Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 30/03/2012 11:28:35 a.m. Application Control INSTALL.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 30/03/2012 11:30:45 a.m. Application Control Microsoft Common Language Runtime native compiler Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 30/03/2012 11:32:16 a.m. Application Control MSI7A4A.TMP Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 30/03/2012 11:32:20 a.m. Application Control MSI8C64.TMP Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 30/03/2012 11:34:00 a.m. Application Control SolarWinds Expor t Engine Application moved to group Trusted Known on the database of the known software

30/03/2012 11:34:01 a.m. Application Control Auto Completion ComboBox Application moved to group Trusted Known on the database of the known software 30/03/2012 11:34:02 a.m. Application Control SolarWinds E-Mai l Message Handler Application moved to group Trusted Known on the dat abase of the known software 30/03/2012 11:34:02 a.m. Application Control Help About Dialo gs Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:34:03 a.m. Application Control Hyperlink Contro l Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:34:03 a.m. Application Control Logo Applicat ion moved to group Trusted Known on the database of the known software 30/03/2012 11:34:03 a.m. Application Control SolarWinds Task Scheduler Application moved to group Trusted Known on the database of the known software 30/03/2012 11:34:04 a.m. Application Control Service Manager Application moved to group Trusted Known on the database of the known softw are 30/03/2012 11:34:05 a.m. Application Control SWToolTips Application moved to group Trusted Known on the database of the known softw are 30/03/2012 11:34:05 a.m. Application Control SolarWinds SNMP Trap Engine Application moved to group Trusted Known on the database of the known software 30/03/2012 11:34:05 a.m. Application Control SolarWinds Alert Actions Application moved to group Trusted Known on the database of the known software 30/03/2012 11:34:06 a.m. Application Control SolarWinds.Net S NMP Active-X Control, Version 5.2.2 Application moved to group Trusted Known on the database of the known software 30/03/2012 11:34:07 a.m. Application Control SolarWinds.Net S NMP Active-X Control Application moved to group Trusted Known on the dat abase of the known software 30/03/2012 11:34:07 a.m. Application Control WebPic ActiveX C ontrol Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:34:08 a.m. Application Control SolarWinds Direc tDNS Active-X Control Application moved to group Trusted Known on the dat abase of the known software 30/03/2012 11:34:08 a.m. Application Control SolarWinds.Net I CMP Active-X Control Application moved to group Trusted Known on the dat abase of the known software 30/03/2012 11:34:09 a.m. Application Control Orion Report Vie w Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:34:09 a.m. Application Control SolarWinds SNMP ActiveX Control Application moved to group Trusted Known on the database of the known software 30/03/2012 11:34:10 a.m. Application Control SolarWinds SNMP ActiveX Control Application moved to group Trusted Known on the database of the known software 30/03/2012 11:34:11 a.m. Application Control ActiveTabs Contr ol Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:34:11 a.m. Application Control SolarWinds Alert Actions Application moved to group Trusted Known on the database of the known software 30/03/2012 11:34:12 a.m. Application Control PortScanner

Application moved to group Trusted Known on the database of the known softw are 30/03/2012 11:34:12 a.m. Application Control SolarWinds Syslo g sender ActiveX Control Application moved to group Trusted Known on the database of the known software 30/03/2012 11:34:13 a.m. Application Control SolarWinds SubCl assing Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:34:13 a.m. Application Control SolarWinds, Inc DNS Active-X Control Application moved to group Trusted Known on the dat abase of the known software 30/03/2012 11:34:14 a.m. Application Control SolarWinds Task Scheduler Application moved to group Trusted Known on the database of the known software 30/03/2012 11:34:14 a.m. Application Control Orion NPM Web En gine Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:34:15 a.m. Application Control Event Log Application moved to group Trusted Known on the database of the known softw are 30/03/2012 11:34:15 a.m. Application Control Network Performa nce Monitor Service Application moved to group Trusted Known on the dat abase of the known software 30/03/2012 11:34:16 a.m. Application Control Orion NPM Map En gine Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:34:16 a.m. Application Control Orion Network Pe rformance Monitor Engine Application moved to group Trusted Known on the database of the known software 30/03/2012 11:34:18 a.m. Application Control Node Status Upda te Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:34:18 a.m. Application Control Discovery Servic es Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:34:19 a.m. Application Control Sonar Discovery Engine Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:34:19 a.m. Application Control SolarWinds Alert Engine, v8 Application moved to group Trusted Known on the database of the known software 30/03/2012 11:34:20 a.m. Application Control SolarWinds SysLo g Actions Application moved to group Trusted Known on the database of the known software 30/03/2012 11:34:21 a.m. Application Control SolarWinds Trap Actions Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:34:22 a.m. Application Control Discovery Servic es Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:34:22 a.m. Application Control SolarWinds MIB T ree Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:34:23 a.m. Application Control Rounded Frame Application moved to group Trusted Known on the database of the known softw are 30/03/2012 11:34:24 a.m. Application Control Orion NPM Web En gine Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:34:27 a.m. Application Control Orion Web Backup

Application moved to group Trusted Known on the database of the known softw are 30/03/2012 11:34:28 a.m. Application Control Trap Viewer Application moved to group Trusted Known on the database of the known softw are 30/03/2012 11:34:29 a.m. Application Control Test Orion Alert s Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:34:29 a.m. Application Control Syslog Viewer Application moved to group Trusted Known on the database of the known softw are 30/03/2012 11:34:30 a.m. Application Control Orion Network Pe rformance Monitor Application moved to group Trusted Known on the dat abase of the known software 30/03/2012 11:34:31 a.m. Application Control Orion Alert Engi ne Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:34:32 a.m. Application Control Monitor Polling Engines Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:34:32 a.m. Application Control Orion Report Wri ter Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:34:33 a.m. Application Control Alert Manager Application moved to group Trusted Known on the database of the known softw are 30/03/2012 11:34:34 a.m. Application Control Account Limitati on Builder Application moved to group Trusted Known on the database of the known software 30/03/2012 11:34:35 a.m. Application Control Orion Report Sch eduler Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:34:35 a.m. Application Control Shutdown SolarWi nds Network Performance Monitor Application moved to group Trusted Known on the database of the known software 30/03/2012 11:34:36 a.m. Application Control Custom Property Editor Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:34:36 a.m. Application Control SolarWinds E-Mai l Notification Server Application moved to group Trusted Known on the dat abase of the known software 30/03/2012 11:34:37 a.m. Application Control MSIA40C.TMP Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 30/03/2012 11:35:30 a.m. Application Control SETUP.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 30/03/2012 11:37:07 a.m. Application Control Microsoft Common Language Runtime native compiler Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 30/03/2012 11:37:09 a.m. Application Control SQL Server Setup Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 30/03/2012 11:37:24 a.m. Application Control Microsoft Distri buted Transaction Coordinator Service Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 30/03/2012 11:39:01 a.m. Application Control SQL Server VSS W riter Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 30/03/2012 11:39:02 a.m. Application Control SQL Server Windo

ws NT Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 30/03/2012 11:39:51 a.m. Application Control SQL Browser Serv ice EXE Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 30/03/2012 11:40:28 a.m. Application Control SolarWinds.Sched ulerService Application moved to group Trusted Known on the database of the known software 30/03/2012 11:40:31 a.m. Application Control SMSvcHost.exe Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 30/03/2012 11:40:35 a.m. Application Control SolarWinds.JobEn gineService Application moved to group Trusted Known on the database of the known software 30/03/2012 11:40:43 a.m. Application Control Load PerfMon Cou nters Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 30/03/2012 11:41:33 a.m. Application Control Windows Package Manager Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 30/03/2012 11:41:34 a.m. Application Control Dism Image Servi cing Utility Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 30/03/2012 11:41:36 a.m. Application Control DISMHOST.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 30/03/2012 11:42:18 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 11:42:52 a.m. Application Control Allowed: Start driver Absent Start driver C:\Windows\SYSTEM32\DRIVERS\MQAC.SYS Start driver 30/03/2012 11:42:52 a.m. Application Control Message Queuing Service Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 30/03/2012 11:43:12 a.m. Application Control DataProcessor Application moved to group Trusted Known on the database of the known softw are 30/03/2012 11:43:13 a.m. Application Control PollingControlle r Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:43:14 a.m. Application Control ManagementAgent Application moved to group Trusted Known on the database of the known softw are 30/03/2012 11:44:00 a.m. Application Control SolarWinds.Infor mationService.Service Application moved to group Trusted Known on the dat abase of the known software 30/03/2012 11:45:13 a.m. Application Control SWPic DLL Application moved to group Trusted Known on the database of the known softw are 30/03/2012 11:45:17 a.m. Application Control tsdefaultextensi on DLL Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:45:18 a.m. Application Control Tom Sawyer Graph Editor Control 5.5.1.228.VS6 (Unicode) Application moved to group Trusted Known on the database of the known software 30/03/2012 11:45:21 a.m. Application Control Windows Common C ontrols ActiveX Control DLL Application moved to group Trusted Signed b y the digital signature of entrusted manufacturers 30/03/2012 11:45:21 a.m. Application Control CMDialog ActiveX Control DLL Application moved to group Trusted Signed by the digital si

gnature of entrusted manufacturers 30/03/2012 11:45:22 a.m. Application Control Microsoft Winsoc k Control DLL Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 30/03/2012 11:46:34 a.m. Application Control CORESERVICEPACKI NSTALLER.BAT Application moved to group Low Restricted High value of th reat rating calculated heuristically 30/03/2012 11:46:34 a.m. Application Control Registry Console Tool Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 30/03/2012 11:47:12 a.m. Application Control ORION-2011.1.2-U PDATE.EXE Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 30/03/2012 11:47:13 a.m. Application Control UPDATE.BAT Application moved to group Low Restricted High value of threat rating calc ulated heuristically 30/03/2012 11:47:15 a.m. Application Control STOPSERVICE.EXE Application moved to group Low Restricted High value of threat rating calc ulated heuristically 30/03/2012 11:47:16 a.m. Application Control Find String (QGR EP) Utility Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 30/03/2012 11:47:18 a.m. Application Control Allowed: Setting debug p rivileges STOPSERVICE.EXE Setting debug privileges Setting debug privileges 30/03/2012 11:47:20 a.m. Application Control Allowed: Setting debug p rivileges STOPSERVICE.EXE Setting debug privileges Setting debug privileges 30/03/2012 11:47:21 a.m. Application Control Allowed: Setting debug p rivileges STOPSERVICE.EXE Setting debug privileges Setting debug privileges 30/03/2012 11:47:21 a.m. Application Control Allowed: Setting debug p rivileges STOPSERVICE.EXE Setting debug privileges Setting debug privileges 30/03/2012 11:47:23 a.m. Application Control Allowed: Setting debug p rivileges STOPSERVICE.EXE Setting debug privileges Setting debug privileges 30/03/2012 11:47:26 a.m. Application Control Allowed: Setting debug p rivileges STOPSERVICE.EXE Setting debug privileges Setting debug privileges 30/03/2012 11:47:26 a.m. Application Control Allowed: Setting debug p rivileges STOPSERVICE.EXE Setting debug privileges Setting debug privileges 30/03/2012 11:47:28 a.m. Application Control Lists the curren t running tasks Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 30/03/2012 11:47:28 a.m. Application Control Allowed: Setting debug p rivileges Lists the current running tasks Setting debug privileges Setting debug privileges 30/03/2012 11:47:30 a.m. Application Control Allowed: Setting debug p rivileges Lists the current running tasks Setting debug privileges Setting debug privileges 30/03/2012 11:47:30 a.m. Application Control Allowed: Setting debug p rivileges Lists the current running tasks Setting debug privileges Setting debug privileges 30/03/2012 11:47:31 a.m. Application Control Allowed: Setting debug p rivileges Lists the current running tasks Setting debug privileges Setting debug privileges 30/03/2012 11:47:31 a.m. Application Control Allowed: Setting debug p rivileges Lists the current running tasks Setting debug privileges

Setting debug privileges 30/03/2012 11:47:32 a.m. Application Control Allowed: Setting debug p rivileges Lists the current running tasks Setting debug privileges Setting debug privileges 30/03/2012 11:47:32 a.m. Application Control Allowed: Setting debug p rivileges Lists the current running tasks Setting debug privileges Setting debug privileges 30/03/2012 11:47:33 a.m. Application Control Allowed: Setting debug p rivileges Lists the current running tasks Setting debug privileges Setting debug privileges 30/03/2012 11:47:33 a.m. Application Control Allowed: Setting debug p rivileges Lists the current running tasks Setting debug privileges Setting debug privileges 30/03/2012 11:47:34 a.m. Application Control Allowed: Setting debug p rivileges Lists the current running tasks Setting debug privileges Setting debug privileges 30/03/2012 11:47:34 a.m. Application Control Allowed: Setting debug p rivileges Lists the current running tasks Setting debug privileges Setting debug privileges 30/03/2012 11:47:35 a.m. Application Control Allowed: Setting debug p rivileges Lists the current running tasks Setting debug privileges Setting debug privileges 30/03/2012 11:47:35 a.m. Application Control Allowed: Setting debug p rivileges Lists the current running tasks Setting debug privileges Setting debug privileges 30/03/2012 11:47:35 a.m. Application Control Allowed: Setting debug p rivileges Lists the current running tasks Setting debug privileges Setting debug privileges 30/03/2012 11:47:36 a.m. Application Control Allowed: Setting debug p rivileges Lists the current running tasks Setting debug privileges Setting debug privileges 30/03/2012 11:47:36 a.m. Application Control Allowed: Setting debug p rivileges Lists the current running tasks Setting debug privileges Setting debug privileges 30/03/2012 11:47:37 a.m. Application Control Extended Copy Ut ility Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 30/03/2012 11:47:38 a.m. Application Control SSCERUNTIME_X86ENU.MSI Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 30/03/2012 11:47:39 a.m. Application Control Allowed: Exiting Microso ft Windows SSCERUNTIME_X86-ENU.MSI Windows shutdown Exiting Microsoft Windows 30/03/2012 11:47:39 a.m. Application Control Allowed: Setting debug p rivileges SSCERUNTIME_X86-ENU.MSI Setting debug privileges Setting debug privileges 30/03/2012 11:48:08 a.m. Application Control MSI254.TMP Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 30/03/2012 11:48:34 a.m. Application Control SolarWinds.IPAM. Licensor Application moved to group Low Restricted High value of th reat rating calculated heuristically 30/03/2012 11:48:39 a.m. Application Control Allowed: Using system pr ogram interfaces (DNS) SolarWinds.IPAM.Licensor Use DNS caching system f or conversion ocsp.thawte.com Using system program interfaces (DNS) 30/03/2012 11:48:52 a.m. Application Control SolarWinds.IPAM. Licensor Application moved to group Trusted 30/03/2012 11:48:52 a.m. Application Control Allowed: Access to passw ord storage SolarWinds.IPAM.Licensor Access to protected storage Access to password storage

30/03/2012 11:48:52 a.m. Application Control SolarWinds.Confi gurationWizard.Host Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 30/03/2012 11:48:54 a.m. Application Control IndependentRunne r Application moved to group Trusted Known on the database of the kno wn software 30/03/2012 11:48:56 a.m. Application Control DISMHOST.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 30/03/2012 11:49:07 a.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 11:49:39 a.m. Application Control ASP.NET setup cu stom actions Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 30/03/2012 11:50:58 a.m. Application Control IPAM.Init Application moved to group Low Restricted High value of threat rating calc ulated heuristically 30/03/2012 11:51:00 a.m. Application Control ECM MakeCert Application moved to group Trusted Known on the database of the known softw are 30/03/2012 11:52:34 a.m. Application Control Network Performa nce Monitor Service Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 30/03/2012 11:52:45 a.m. Application Control .NET Framework i nstallation utility Application moved to group Trusted Signed by the di gital signature of entrusted manufacturers 30/03/2012 11:53:13 a.m. Application Control SolarWinds.JobEn gineService.v2 Application moved to group Trusted Known on the database of the known software 30/03/2012 11:53:20 a.m. Application Control SWAlertingEngine Application moved to group Trusted Known on the database of the known softw are 30/03/2012 11:53:24 a.m. Application Control SyslogService Application moved to group Trusted Known on the database of the known softw are 30/03/2012 11:53:26 a.m. Application Control TrapService Application moved to group Trusted Known on the database of the known softw are 30/03/2012 11:53:27 a.m. Application Control Unload PerfMon C ounters Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 30/03/2012 11:53:32 a.m. Application Control SolarWinds.Busin essLayerHost Application moved to group Trusted Known on the database of the known software 30/03/2012 11:53:34 a.m. Application Control SolarWinds.Infor mationService.Service Application moved to group Trusted Known on the dat abase of the known software 30/03/2012 11:53:47 a.m. Application Control IIS Worker Proce ss Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 30/03/2012 11:54:32 a.m. Application Control Visual C# Comman d Line Compiler Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 30/03/2012 11:54:49 a.m. Application Control ImportMapBatch Application moved to group Trusted Known on the database of the known softw are 30/03/2012 11:56:31 a.m. Application Control SolarWinds.Webla uncher Application moved to group Trusted Known on the database of the kno wn software

30/03/2012 12:26:35 p.m. Application Control SWPic DLL Application moved to group Trusted Known on the database of the known softw are 30/03/2012 12:26:36 p.m. Application Control DriverSetup.exe Application moved to group Trusted Known on the database of the known softw are 30/03/2012 12:26:36 p.m. Application Control Huawei(R) DevSet up Version 1.0.1.3 for Windows 2K, XP, Vista, Win7. Application moved to gro up Trusted Known on the database of the known software 30/03/2012 12:29:15 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 12:29:20 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 12:29:25 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 12:31:29 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 12:49:05 p.m. Update Center Task started Kaspersky PURE Update Center 30/03/2012 01:44:42 p.m. Application Control Microsoft Malwar e Protection Command Line Utility Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 30/03/2012 01:59:04 p.m. Application Control VMware Player In staller Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 30/03/2012 01:59:39 p.m. Application Control vcredist_x86.exe Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 30/03/2012 01:59:42 p.m. Application Control INSTALL.EXE Application moved to group Trusted Signed by the digital signature of entru sted manufacturers 30/03/2012 02:00:36 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 02:00:46 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 02:00:46 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 02:01:54 p.m. Application Control Allowed: Start driver Absent Start driver C:\WINDOWS\SYSTEM32\DRIVERS\HCMON.SYS Start driver 30/03/2012 02:02:07 p.m. Application Control Allowed: Start driver Absent Start driver C:\Windows\SYSTEM32\DRIVERS\VMNETBRIDGE.SYS Start dr iver 30/03/2012 02:02:14 p.m. Application Control Allowed: Start driver Absent Start driver C:\WINDOWS\SYSTEM32\DRIVERS\VMNETUSERIF.SYS Start dr iver 30/03/2012 02:02:15 p.m. Application Control VMware NAT Servi ce Application moved to group Trusted Signed by the digital signature of entrusted manufacturers 30/03/2012 02:02:21 p.m. Application Control VMware VMnet DHC P service Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 30/03/2012 02:02:23 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa

rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 02:02:29 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 02:02:30 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 02:03:38 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 02:03:43 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 02:03:43 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 02:04:46 p.m. Application Control Allowed: Start driver Absent Start driver C:\WINDOWS\SYSTEM32\DRIVERS\VMX86.SYS Start driver 30/03/2012 02:04:47 p.m. Application Control VMware Authoriza tion Service Application moved to group Trusted Known on the database of the known software 30/03/2012 02:04:54 p.m. Application Control VMware USB Arbit ration Service Application moved to group Trusted Signed by the digital si gnature of entrusted manufacturers 30/03/2012 02:42:11 p.m. File Anti-Virus Processing error InfoWatc h CryptoStorage Protected objects controller service C:\$Extend\$Repa rse:$R:$INDEX_ALLOCATION Read error 30/03/2012 02:42:25 p.m. Protection Center Protection is not runnin g Kaspersky PURE 30/03/2012 06:58:09 p.m. Anti-Spam Task started Kaspersky PURE Anti-Spam 30/03/2012 06:58:09 p.m. File Anti-Virus Task started Kaspersky PURE File Anti-Virus 30/03/2012 06:58:09 p.m. Application Control Task started Kaspersk y PURE Application Control 30/03/2012 06:58:09 p.m. Firewall Task started Kaspersky PURE Firewall 30/03/2012 06:58:09 p.m. Network Attack Blocker Task started Kaspersk y PURE Network Attack Blocker 30/03/2012 06:58:09 p.m. IM Anti-Virus Task started Kaspersky PURE IM Anti-Virus 30/03/2012 06:58:09 p.m. Mail Anti-Virus Task started Kaspersky PURE Mail Anti-Virus 30/03/2012 06:58:09 p.m. Proactive Defense Task started Kaspersk y PURE Proactive Defense 30/03/2012 06:58:10 p.m. Web Anti-Virus Task started Kaspersky PURE Web Anti-Virus 30/03/2012 06:59:16 p.m. Protection Center Your computer is protect ed Kaspersky PURE