[04/26/16-22:48:47] ********************************************* [04/26/16-22:48:47] Network Inspection System service starting. [04/26/16-22:48:47] Version: 4.9.10586.0 [04/26/16-22:48:47] ********************************************* [04/26/16-22:48:47] Service started by NisIpsPlugin [04/26/16-22:48:47] Service started [04/26/16-22:48:48] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default [04/26/16-22:48:48] Win8+: overriding fZeroDayEnabled to FALSE [04/26/16-22:48:48] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.8.0.0 [04/26/16-22:48:48] --Signature list start-- [04/26/16-22:48:48] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:48:48] --Signature list end-- [04/26/16-22:48:48] Signatures: Total: 101; Enabled: 99 [04/26/16-22:48:48] Active signature breakdown: BM: 99; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [04/26/16-22:48:48] New engine version=2.1.11804.0; New signature version=115.8.0.0 [04/26/16-22:48:48] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1 [04/26/16-22:48:48] At least one signature is active [04/26/16-22:48:48] Connecting to the driver [04/26/16-22:48:48] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 6 [04/26/16-22:48:48] Load Definitions completed successfully. [04/26/16-22:54:36] ********************************************* [04/26/16-22:54:36] Network Inspection System service starting. [04/26/16-22:54:36] Version: 4.9.10586.0 [04/26/16-22:54:36] ********************************************* [04/26/16-22:54:36] Service started by NisIpsPlugin [04/26/16-22:54:36] Service started [04/26/16-22:54:37] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default [04/26/16-22:54:37] Win8+: overriding fZeroDayEnabled to FALSE [04/26/16-22:54:37] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.8.0.0 [04/26/16-22:54:37] --Signature list start-- [04/26/16-22:54:37] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:54:37] --Signature list end-- [04/26/16-22:54:37] Signatures: Total: 101; Enabled: 99 [04/26/16-22:54:37] Active signature breakdown: BM: 99; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [04/26/16-22:54:37] New engine version=2.1.11804.0; New signature version=115.8.0.0 [04/26/16-22:54:37] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1 [04/26/16-22:54:37] At least one signature is active [04/26/16-22:54:37] Connecting to the driver [04/26/16-22:54:37] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 6 [04/26/16-22:54:37] Load Definitions completed successfully. [04/26/16-22:55:56] ********************************************* [04/26/16-22:55:56] Network Inspection System service starting. [04/26/16-22:55:56] Version: 4.9.10586.0 [04/26/16-22:55:56] ********************************************* [04/26/16-22:55:56] Service started by NisIpsPlugin [04/26/16-22:55:56] Service started [04/26/16-22:55:56] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Default [04/26/16-22:55:56] Win8+: overriding fZeroDayEnabled to FALSE [04/26/16-22:55:56] Signature update - files received: Engine version: 2.1.11804.0; Signature version = 115.8.0.0 [04/26/16-22:55:56] --Signature list start-- [04/26/16-22:55:56] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [04/26/16-22:55:56] --Signature list end-- [04/26/16-22:55:56] Signatures: Total: 101; Enabled: 99 [04/26/16-22:55:56] Active signature breakdown: BM: 99; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [04/26/16-22:55:56] New engine version=2.1.11804.0; New signature version=115.8.0.0 [04/26/16-22:55:56] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1 [04/26/16-22:55:56] At least one signature is active [04/26/16-22:55:56] Connecting to the driver [04/26/16-22:55:56] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 6 [04/26/16-22:55:56] Load Definitions completed successfully. [06/07/16-02:38:10] ********************************************* [06/07/16-02:38:10] Network Inspection System service starting. [06/07/16-02:38:10] Version: 4.9.10586.0 [06/07/16-02:38:10] ********************************************* [06/07/16-02:38:10] Service started manually or by SCM crash recovery [06/07/16-02:38:10] Service started [06/07/16-02:39:22] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{5EC5DB70-0379-194C-FC3E-E120FAC7DB86} [06/07/16-02:39:22] Win8+: overriding fZeroDayEnabled to FALSE [06/07/16-02:39:22] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.2.0.0 [06/07/16-02:39:23] --Signature list start-- [06/07/16-02:39:23] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:39:23] --Signature list end-- [06/07/16-02:39:23] Signatures: Total: 143; Enabled: 141 [06/07/16-02:39:23] Active signature breakdown: BM: 141; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/07/16-02:39:23] New engine version=2.1.12706.0; New signature version=116.2.0.0 [06/07/16-02:39:23] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1 [06/07/16-02:39:23] At least one signature is active [06/07/16-02:39:23] Connecting to the driver [06/07/16-02:39:23] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12 [06/07/16-02:39:23] Load Definitions completed successfully. [06/07/16-02:44:27] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.2.0.0 [06/07/16-02:44:28] --Signature list start-- [06/07/16-02:44:28] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/07/16-02:44:28] --Signature list end-- [06/07/16-02:44:28] Signatures: Total: 143; Enabled: 141 [06/07/16-02:44:28] Active signature breakdown: BM: 141; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/07/16-02:44:28] New engine version=2.1.12706.0; New signature version=116.2.0.0 [06/07/16-12:39:59] ********************************************* [06/07/16-12:39:59] Network Inspection System service starting. [06/07/16-12:39:59] Version: 4.9.10586.0 [06/07/16-12:39:59] ********************************************* [06/07/16-12:39:59] Service started by NisIpsPlugin [06/07/16-12:39:59] Service started [06/07/16-12:39:59] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E} [06/07/16-12:39:59] Win8+: overriding fZeroDayEnabled to FALSE [06/07/16-12:39:59] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/07/16-12:40:02] --Signature list start-- [06/07/16-12:40:02] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:40:02] --Signature list end-- [06/07/16-12:40:02] Signatures: Total: 144; Enabled: 142 [06/07/16-12:40:02] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/07/16-12:40:02] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/07/16-12:40:02] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1 [06/07/16-12:40:02] At least one signature is active [06/07/16-12:40:02] Connecting to the driver [06/07/16-12:40:02] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12 [06/07/16-12:40:02] Load Definitions completed successfully. [06/07/16-12:43:53] Parse error - Cancel Inspection [06/07/16-12:43:53] Parse error - Cancel Inspection [06/07/16-12:51:29] ********************************************* [06/07/16-12:51:30] Network Inspection System service starting. [06/07/16-12:51:30] Version: 4.9.10586.0 [06/07/16-12:51:30] ********************************************* [06/07/16-12:51:30] Service started by NisIpsPlugin [06/07/16-12:51:30] Service started [06/07/16-12:51:30] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E} [06/07/16-12:51:30] Win8+: overriding fZeroDayEnabled to FALSE [06/07/16-12:51:30] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/07/16-12:51:31] --Signature list start-- [06/07/16-12:51:31] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/07/16-12:51:31] --Signature list end-- [06/07/16-12:51:31] Signatures: Total: 144; Enabled: 142 [06/07/16-12:51:31] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/07/16-12:51:31] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/07/16-12:51:31] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1 [06/07/16-12:51:31] At least one signature is active [06/07/16-12:51:31] Connecting to the driver [06/07/16-12:51:32] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12 [06/07/16-12:51:32] Load Definitions completed successfully. [06/07/16-12:58:47] Parse error - Cancel Inspection [06/07/16-13:28:00] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/07/16-13:28:01] --Signature list start-- [06/07/16-13:28:01] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:28:01] --Signature list end-- [06/07/16-13:28:01] Signatures: Total: 144; Enabled: 142 [06/07/16-13:28:01] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/07/16-13:28:01] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/07/16-13:42:25] ********************************************* [06/07/16-13:42:25] Network Inspection System service starting. [06/07/16-13:42:25] Version: 4.9.10586.0 [06/07/16-13:42:25] ********************************************* [06/07/16-13:42:25] Service started by NisIpsPlugin [06/07/16-13:42:25] Service started [06/07/16-13:42:25] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E} [06/07/16-13:42:25] Win8+: overriding fZeroDayEnabled to FALSE [06/07/16-13:42:25] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/07/16-13:42:26] --Signature list start-- [06/07/16-13:42:26] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/07/16-13:42:26] --Signature list end-- [06/07/16-13:42:26] Signatures: Total: 144; Enabled: 142 [06/07/16-13:42:26] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/07/16-13:42:26] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/07/16-13:42:26] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1 [06/07/16-13:42:26] At least one signature is active [06/07/16-13:42:26] Connecting to the driver [06/07/16-13:42:26] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12 [06/07/16-13:42:26] Load Definitions completed successfully. [06/07/16-13:44:35] Parse error - Cancel Inspection [06/07/16-14:14:36] Parse error - Cancel Inspection [06/07/16-14:24:07] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/07/16-14:24:07] --Signature list start-- [06/07/16-14:24:07] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/07/16-14:24:07] --Signature list end-- [06/07/16-14:24:07] Signatures: Total: 144; Enabled: 142 [06/07/16-14:24:07] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/07/16-14:24:07] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/07/16-15:18:08] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/07/16-15:18:09] --Signature list start-- [06/07/16-15:18:09] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/07/16-15:18:09] --Signature list end-- [06/07/16-15:18:09] Signatures: Total: 144; Enabled: 142 [06/07/16-15:18:09] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/07/16-15:18:09] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/07/16-16:14:49] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/07/16-16:14:50] --Signature list start-- [06/07/16-16:14:50] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:14:50] --Signature list end-- [06/07/16-16:14:50] Signatures: Total: 144; Enabled: 142 [06/07/16-16:14:50] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/07/16-16:14:50] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/07/16-16:31:44] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/07/16-16:31:44] --Signature list start-- [06/07/16-16:31:44] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:31:44] --Signature list end-- [06/07/16-16:31:44] Signatures: Total: 144; Enabled: 142 [06/07/16-16:31:44] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/07/16-16:31:44] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/07/16-16:39:19] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/07/16-16:39:19] --Signature list start-- [06/07/16-16:39:19] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:39:19] --Signature list end-- [06/07/16-16:39:19] Signatures: Total: 144; Enabled: 142 [06/07/16-16:39:19] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/07/16-16:39:19] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/07/16-16:48:10] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/07/16-16:48:10] --Signature list start-- [06/07/16-16:48:10] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/07/16-16:48:10] --Signature list end-- [06/07/16-16:48:10] Signatures: Total: 144; Enabled: 142 [06/07/16-16:48:10] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/07/16-16:48:10] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/07/16-17:04:52] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/07/16-17:04:52] --Signature list start-- [06/07/16-17:04:52] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:04:52] --Signature list end-- [06/07/16-17:04:52] Signatures: Total: 144; Enabled: 142 [06/07/16-17:04:52] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/07/16-17:04:52] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/07/16-17:25:03] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/07/16-17:25:03] --Signature list start-- [06/07/16-17:25:03] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/07/16-17:25:03] --Signature list end-- [06/07/16-17:25:03] Signatures: Total: 144; Enabled: 142 [06/07/16-17:25:03] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/07/16-17:25:03] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/07/16-21:15:11] ********************************************* [06/07/16-21:15:11] Network Inspection System service starting. [06/07/16-21:15:11] Version: 4.9.10586.0 [06/07/16-21:15:11] ********************************************* [06/07/16-21:15:11] Service started by NisIpsPlugin [06/07/16-21:15:11] Service started [06/07/16-21:15:11] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E} [06/07/16-21:15:11] Win8+: overriding fZeroDayEnabled to FALSE [06/07/16-21:15:11] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/07/16-21:15:12] --Signature list start-- [06/07/16-21:15:12] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:15:12] --Signature list end-- [06/07/16-21:15:12] Signatures: Total: 144; Enabled: 142 [06/07/16-21:15:12] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/07/16-21:15:12] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/07/16-21:15:12] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1 [06/07/16-21:15:12] At least one signature is active [06/07/16-21:15:12] Connecting to the driver [06/07/16-21:15:12] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12 [06/07/16-21:15:12] Load Definitions completed successfully. [06/07/16-21:40:48] ********************************************* [06/07/16-21:40:48] Network Inspection System service starting. [06/07/16-21:40:48] Version: 4.9.10586.0 [06/07/16-21:40:48] ********************************************* [06/07/16-21:40:48] Service started by NisIpsPlugin [06/07/16-21:40:48] Service started [06/07/16-21:40:48] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E} [06/07/16-21:40:48] Win8+: overriding fZeroDayEnabled to FALSE [06/07/16-21:40:48] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/07/16-21:40:48] --Signature list start-- [06/07/16-21:40:48] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/07/16-21:40:48] --Signature list end-- [06/07/16-21:40:48] Signatures: Total: 144; Enabled: 142 [06/07/16-21:40:48] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/07/16-21:40:48] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/07/16-21:40:48] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1 [06/07/16-21:40:48] At least one signature is active [06/07/16-21:40:48] Connecting to the driver [06/07/16-21:40:48] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12 [06/07/16-21:40:48] Load Definitions completed successfully. [06/07/16-21:42:31] Parse error - Cancel Inspection [06/07/16-22:11:41] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/07/16-22:11:42] --Signature list start-- [06/07/16-22:11:42] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:11:42] --Signature list end-- [06/07/16-22:11:42] Signatures: Total: 144; Enabled: 142 [06/07/16-22:11:42] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/07/16-22:11:42] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/07/16-22:26:48] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/07/16-22:26:48] --Signature list start-- [06/07/16-22:26:48] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:26:48] --Signature list end-- [06/07/16-22:26:48] Signatures: Total: 144; Enabled: 142 [06/07/16-22:26:48] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/07/16-22:26:48] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/07/16-22:56:54] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/07/16-22:56:54] --Signature list start-- [06/07/16-22:56:54] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/07/16-22:56:54] --Signature list end-- [06/07/16-22:56:54] Signatures: Total: 144; Enabled: 142 [06/07/16-22:56:54] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/07/16-22:56:54] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/07/16-23:11:56] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/07/16-23:11:56] --Signature list start-- [06/07/16-23:11:56] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/07/16-23:11:56] --Signature list end-- [06/07/16-23:11:56] Signatures: Total: 144; Enabled: 142 [06/07/16-23:11:56] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/07/16-23:11:56] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/08/16-18:00:29] ********************************************* [06/08/16-18:00:29] Network Inspection System service starting. [06/08/16-18:00:29] Version: 4.9.10586.0 [06/08/16-18:00:29] ********************************************* [06/08/16-18:00:29] Service started by NisIpsPlugin [06/08/16-18:00:29] Service started [06/08/16-18:00:29] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E} [06/08/16-18:00:29] Win8+: overriding fZeroDayEnabled to FALSE [06/08/16-18:00:29] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/08/16-18:00:29] --Signature list start-- [06/08/16-18:00:29] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/08/16-18:00:29] --Signature list end-- [06/08/16-18:00:29] Signatures: Total: 144; Enabled: 142 [06/08/16-18:00:29] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/08/16-18:00:29] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/08/16-18:00:29] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1 [06/08/16-18:00:29] At least one signature is active [06/08/16-18:00:29] Connecting to the driver [06/08/16-18:00:29] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12 [06/08/16-18:00:29] Load Definitions completed successfully. [06/08/16-18:02:42] Parse error - Cancel Inspection [06/09/16-10:30:06] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/09/16-10:30:07] --Signature list start-- [06/09/16-10:30:07] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:30:07] --Signature list end-- [06/09/16-10:30:07] Signatures: Total: 144; Enabled: 142 [06/09/16-10:30:07] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/09/16-10:30:07] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/09/16-10:44:56] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/09/16-10:44:56] --Signature list start-- [06/09/16-10:44:56] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:56] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/09/16-10:44:57] --Signature list end-- [06/09/16-10:44:57] Signatures: Total: 144; Enabled: 142 [06/09/16-10:44:57] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/09/16-10:44:57] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/09/16-11:00:00] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/09/16-11:00:01] --Signature list start-- [06/09/16-11:00:01] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:00:01] --Signature list end-- [06/09/16-11:00:01] Signatures: Total: 144; Enabled: 142 [06/09/16-11:00:01] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/09/16-11:00:01] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/09/16-11:15:04] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/09/16-11:15:05] --Signature list start-- [06/09/16-11:15:05] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/09/16-11:15:05] --Signature list end-- [06/09/16-11:15:05] Signatures: Total: 144; Enabled: 142 [06/09/16-11:15:05] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/09/16-11:15:05] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/21/16-13:29:51] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/21/16-13:29:52] --Signature list start-- [06/21/16-13:29:52] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:29:52] --Signature list end-- [06/21/16-13:29:52] Signatures: Total: 144; Enabled: 142 [06/21/16-13:29:52] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/21/16-13:29:52] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/21/16-13:44:39] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/21/16-13:44:39] --Signature list start-- [06/21/16-13:44:39] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/21/16-13:44:39] --Signature list end-- [06/21/16-13:44:39] Signatures: Total: 144; Enabled: 142 [06/21/16-13:44:39] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/21/16-13:44:39] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/25/16-13:20:25] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/25/16-13:20:27] --Signature list start-- [06/25/16-13:20:27] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:20:27] --Signature list end-- [06/25/16-13:20:27] Signatures: Total: 144; Enabled: 142 [06/25/16-13:20:27] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/25/16-13:20:27] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/25/16-13:26:34] ********************************************* [06/25/16-13:26:34] Network Inspection System service starting. [06/25/16-13:26:34] Version: 4.9.10586.0 [06/25/16-13:26:34] ********************************************* [06/25/16-13:26:34] Service started by NisIpsPlugin [06/25/16-13:26:34] Service started [06/25/16-13:26:35] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E} [06/25/16-13:26:35] Win8+: overriding fZeroDayEnabled to FALSE [06/25/16-13:26:35] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/25/16-13:26:35] --Signature list start-- [06/25/16-13:26:35] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:26:35] --Signature list end-- [06/25/16-13:26:35] Signatures: Total: 144; Enabled: 142 [06/25/16-13:26:35] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/25/16-13:26:35] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/25/16-13:26:35] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1 [06/25/16-13:26:35] At least one signature is active [06/25/16-13:26:35] Connecting to the driver [06/25/16-13:26:35] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12 [06/25/16-13:26:35] Load Definitions completed successfully. [06/25/16-13:32:55] ********************************************* [06/25/16-13:32:55] Network Inspection System service starting. [06/25/16-13:32:55] Version: 4.9.10586.0 [06/25/16-13:32:55] ********************************************* [06/25/16-13:32:55] Service started by NisIpsPlugin [06/25/16-13:32:55] Service started [06/25/16-13:32:55] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E} [06/25/16-13:32:55] Win8+: overriding fZeroDayEnabled to FALSE [06/25/16-13:32:55] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [06/25/16-13:32:55] --Signature list start-- [06/25/16-13:32:55] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [06/25/16-13:32:55] --Signature list end-- [06/25/16-13:32:55] Signatures: Total: 144; Enabled: 142 [06/25/16-13:32:55] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [06/25/16-13:32:55] New engine version=2.1.12706.0; New signature version=116.3.0.0 [06/25/16-13:32:55] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1 [06/25/16-13:32:55] At least one signature is active [06/25/16-13:32:55] Connecting to the driver [06/25/16-13:32:55] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12 [06/25/16-13:32:55] Load Definitions completed successfully. [07/01/16-23:30:11] ********************************************* [07/01/16-23:30:11] Network Inspection System service starting. [07/01/16-23:30:11] Version: 4.9.10586.0 [07/01/16-23:30:11] ********************************************* [07/01/16-23:30:11] Service started by NisIpsPlugin [07/01/16-23:30:11] Service started [07/01/16-23:30:12] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{2A46D4E4-8E3A-4222-B7AD-6985714DC49E} [07/01/16-23:30:12] Win8+: overriding fZeroDayEnabled to FALSE [07/01/16-23:30:12] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.3.0.0 [07/01/16-23:30:12] --Signature list start-- [07/01/16-23:30:12] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [07/01/16-23:30:12] --Signature list end-- [07/01/16-23:30:12] Signatures: Total: 144; Enabled: 142 [07/01/16-23:30:12] Active signature breakdown: BM: 142; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [07/01/16-23:30:12] New engine version=2.1.12706.0; New signature version=116.3.0.0 [07/01/16-23:30:12] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1 [07/01/16-23:30:12] At least one signature is active [07/01/16-23:30:12] Connecting to the driver [07/01/16-23:30:13] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12 [07/01/16-23:30:13] Load Definitions completed successfully. [07/02/16-00:34:49] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FD7EECF4-D311-497C-ABE5-FA73D782E523} [07/02/16-00:34:49] Win8+: overriding fZeroDayEnabled to FALSE [07/02/16-00:34:49] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.10.0.0 [07/02/16-00:34:49] --Signature list start-- [07/02/16-00:34:49] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {6011c172-7be0-4a34-af59-a38c49827d7f} Other:Win/ScGhostRat.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {08a14bbc-ae18-4670-995d-9504b9a606df} Other:Win/ScHcdLoader.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:34:49] --Signature list end-- [07/02/16-00:34:49] Signatures: Total: 146; Enabled: 144 [07/02/16-00:34:49] Active signature breakdown: BM: 144; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [07/02/16-00:34:49] New engine version=2.1.12706.0; New signature version=116.10.0.0 [07/02/16-00:34:49] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1 [07/02/16-00:34:49] At least one signature is active [07/02/16-00:34:49] Already connected to the driver [07/02/16-00:34:49] Load Definitions completed successfully. [07/02/16-00:52:49] ********************************************* [07/02/16-00:52:49] Network Inspection System service starting. [07/02/16-00:52:49] Version: 4.9.10586.0 [07/02/16-00:52:49] ********************************************* [07/02/16-00:52:49] Service started by NisIpsPlugin [07/02/16-00:52:49] Service started [07/02/16-00:52:49] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FD7EECF4-D311-497C-ABE5-FA73D782E523} [07/02/16-00:52:49] Win8+: overriding fZeroDayEnabled to FALSE [07/02/16-00:52:50] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.10.0.0 [07/02/16-00:52:50] --Signature list start-- [07/02/16-00:52:50] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {6011c172-7be0-4a34-af59-a38c49827d7f} Other:Win/ScGhostRat.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {08a14bbc-ae18-4670-995d-9504b9a606df} Other:Win/ScHcdLoader.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [07/02/16-00:52:50] --Signature list end-- [07/02/16-00:52:50] Signatures: Total: 146; Enabled: 144 [07/02/16-00:52:50] Active signature breakdown: BM: 144; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [07/02/16-00:52:50] New engine version=2.1.12706.0; New signature version=116.10.0.0 [07/02/16-00:52:50] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1 [07/02/16-00:52:50] At least one signature is active [07/02/16-00:52:50] Connecting to the driver [07/02/16-00:52:50] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12 [07/02/16-00:52:50] Load Definitions completed successfully. [07/02/16-01:06:39] Parse error - Cancel Inspection [07/02/16-01:06:40] Parse error - Cancel Inspection [07/02/16-01:06:45] Parse error - Cancel Inspection [07/02/16-01:23:19] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FD7EECF4-D311-497C-ABE5-FA73D782E523} [07/02/16-01:23:19] Win8+: overriding fZeroDayEnabled to FALSE [07/02/16-01:23:19] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.10.0.0 [07/02/16-01:23:20] --Signature list start-- [07/02/16-01:23:20] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {6011c172-7be0-4a34-af59-a38c49827d7f} Other:Win/ScGhostRat.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {08a14bbc-ae18-4670-995d-9504b9a606df} Other:Win/ScHcdLoader.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:23:20] --Signature list end-- [07/02/16-01:23:20] Signatures: Total: 146; Enabled: 144 [07/02/16-01:23:20] Active signature breakdown: BM: 144; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [07/02/16-01:23:20] New engine version=2.1.12706.0; New signature version=116.10.0.0 [07/02/16-01:23:20] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1 [07/02/16-01:23:20] At least one signature is active [07/02/16-01:23:20] Already connected to the driver [07/02/16-01:23:20] Load Definitions completed successfully. [07/02/16-01:28:38] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.10.0.0 [07/02/16-01:28:39] --Signature list start-- [07/02/16-01:28:39] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {6011c172-7be0-4a34-af59-a38c49827d7f} Other:Win/ScGhostRat.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {08a14bbc-ae18-4670-995d-9504b9a606df} Other:Win/ScHcdLoader.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:28:39] --Signature list end-- [07/02/16-01:28:39] Signatures: Total: 146; Enabled: 144 [07/02/16-01:28:39] Active signature breakdown: BM: 144; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [07/02/16-01:28:39] New engine version=2.1.12706.0; New signature version=116.10.0.0 [07/02/16-01:50:28] ********************************************* [07/02/16-01:50:28] Network Inspection System service starting. [07/02/16-01:50:28] Version: 4.9.10586.0 [07/02/16-01:50:28] ********************************************* [07/02/16-01:50:28] Service started by NisIpsPlugin [07/02/16-01:50:28] Service started [07/02/16-01:50:28] Loading Definitions: fZeroDayEnabled=1, fNetBmEnabled=1, path=C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FD7EECF4-D311-497C-ABE5-FA73D782E523} [07/02/16-01:50:28] Win8+: overriding fZeroDayEnabled to FALSE [07/02/16-01:50:29] Signature update - files received: Engine version: 2.1.12706.0; Signature version = 116.10.0.0 [07/02/16-01:50:30] --Signature list start-- [07/02/16-01:50:30] [On ] Sig {2e008210-b6b9-405f-84b5-94a468eab6f7} Other:Win/AdflyClickFraud.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {387dc41e-eceb-4349-a1bb-cc732ee16366} Other:Win/AdknowledgeClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {e55a5229-05b1-4062-81f2-93ea2ea47981} Other:Win/Asruex.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {284828f5-6a37-40ec-a67d-63722519fee1} Other:Win/AsruexB.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {98fc2ed0-1a01-4940-8895-b782084dfc24} Other:Win/Beebone.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {0ba185cf-007f-468f-b01e-e83c6f60a829} Other:Win/BIFROSE.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {54d50bad-f698-4ff9-9a53-1f678bd39a48} Other:Win/BingAdClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {a54d4ab4-c13b-47cf-9419-69569450440d} Other:Win/BingAdClickBing.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {69055c7c-acc5-4b54-9821-09138dec7d5b} Other:Win/BladabindiCustom!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {56bbce1a-f69c-409a-8c11-36d89f400041} Other:Win/BlofeldCat.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {f224a29c-29c7-4d94-9063-cf1ae837856d} Other:Win/Caphaw.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {60a54817-6315-4ffa-aee4-a51eefb054a0} Other:Win/CLEAMAN.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {881bed77-cdb1-4501-a6e7-7a1ec579984c} Other:Win/Clodow.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {7a92d123-0f68-4785-983c-e996192fb1c3} Other:Win/CloudAtlas.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {42126365-43d2-4443-819d-9e7beb124489} Other:Win/Crowti.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {3ddcbe3f-5973-4cc9-8080-f653c7a6f31c} Other:Win/CSTest1.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {01dd252e-1475-4af1-93c8-e2117b40b5c9} Other:Win/CSTest2.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {84c0306d-7263-4c43-a285-8679737baa40} Other:Win/CSTest3.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {37e49567-8af6-44de-acfb-1decaf8bd58f} Other:Win/CSTest4.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {0dbd3581-f80d-4407-9108-d4830f868c32} Other:Win/CSTest5.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {e113e28b-ea10-42b5-b85c-a979b6bfd0c5} Other:Win/CSTest6.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {1aad80da-31be-42eb-8838-09d2a7e92141} Other:Win/CSTest7.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {d703fe36-c50b-4c92-9697-6d1d9d177fa1} Other:Win/CSTest8.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {9b19b511-82ca-4cdf-8e92-1cf14539011e} Other:Win/CSTest9.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {20da8932-2793-4189-ad7e-bd4f7215d244} Other:Win/CSTest10.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {f038141b-c0ea-4d68-94f8-d5e350a0cd71} Other:Win/CSTest11.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {c14f568e-5bc2-4bca-961c-8fd7c8b99f0c} Other:Win/CSTest12.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {438e7b51-2fff-464e-abf3-22c22146a457} Other:Win/CSTest13.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {e8dfe19c-81c6-4c6c-916f-fdf3c63f2249} Other:Win/CSTest14.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {c0af4a50-8911-436c-830f-797b419b55b0} Other:Win/CYCBOT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {8ee84a4c-8a68-4a3c-9954-1b15f4183f7e} Other:Win/DataExfiltrationA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {c04d8bf1-79a7-4f2c-9a7e-55efeedae8ff} Other:Win/Dimegup.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {354e30fa-e1f6-4dd8-9dd5-3df2f5cdc3ce} Other:Win/Dipsind.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {0129d86b-c9e0-467f-a20d-3ffc96f1d187} Other:Win/Domarat.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {cba112e5-29ba-4ea0-a35a-65b1e97ad46a} Other:Win/Domoplock.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {3c5ed7df-ff67-475c-9a2f-19dfc3f5a0ff} Other:Win/Dorkbot.A.IRC!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {5c7cb073-d1cc-44f2-a7b3-09a9030ce661} Other:Win/DotBeaconing.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {193aedbe-238b-4708-ae81-0b5667175923} Other:Win/Etumbot.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {530607d9-8e4d-44c2-91da-4951e9c11550} Other:Win/FAKEPAV.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {e43c8ce3-4ab0-4c32-a59d-7a6f57a0e379} Other:Win/FAREIT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {56248e94-e893-4be5-b9bb-df158d93d7ad} Other:Win/FleercivetIdleFraud.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {e8c9a0d3-e8a2-4246-9ff8-76abf78f4ea6} Other:Win/FynloskiTCPStream.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {accdb368-cac9-4202-9898-2ac8fe59c56f} Other:Win/Gamarue.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {f2579c2b-59b1-4918-9aed-da75c192721b} Other:Win/Gatak.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {8b890dcf-113f-4bcb-b200-ac55e9b160d2} Other:Win/GenericIrc.A.IRC!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {3bfce433-be06-40fb-8ad5-c4cca44e6240} Other:Win/GenInjectorFL.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {5ba89bf8-426c-4bcc-b371-82f4b246ffa2} Other:Win/Gingplog.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {c6442852-815c-44b7-953b-06a060d617c3} Other:Win/GingplogDropper.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {d8951bd9-a516-4c61-a9d8-3f22b236e776} Other:Win/Gold.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {f3c5a901-58f4-4357-b1f2-fa27b8080c0c} Other:Win/GROZLEX.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {21d87a46-1d28-410c-91c7-f4aa8fc02c84} Other:Win/Guplof.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {fad62e2d-5c87-4294-b281-2f1a82ab1eea} Other:Win/HARNIG.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {092843a7-07b1-4103-82f9-ac0b189ae450} Other:Win/Havex.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {996103f8-2d2b-43ca-a134-88d41eba2a88} Other:Win/HikitCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {ed4aa3ca-40fb-409a-9294-77699e69f349} Other:Win/HOTBAR.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {4fefea43-6a1b-4429-8b63-bc6fea62a77b} Other:Win/HTTPDos.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {8ad316ec-cb68-4b13-ac04-4e2421deafb4} Other:Win/HttpsGeneric.HTTPS!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {08fd2b74-8197-4d10-bd3e-091068305ceb} Other:Win/Jaku.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {9d51d4d3-107a-452d-a316-521f667d2ce9} Other:Win/Jenxcus.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {e935d48f-fa23-45ed-bb58-67d717108c60} Other:Win/Jpin.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {5986d086-4ce6-491b-9f8e-73519a982a70} Other:Win/Jpin2.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {1db9a5a1-8e70-4c1c-b0eb-619f0e96f931} Other:Win/Kasidet.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {3f95ba54-072c-4fc4-9e92-e582d5f3e1cd} Other:Win/Lojack.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {829c21c6-0714-4edb-a5b5-386beca031fa} Other:Win/LOLYDA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {23e41355-7840-45fd-9acd-80663b09527b} Other:Win/LureHostA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {03d73f7b-2ab2-4f3c-a655-5b55f39408de} Other:Win/Macoute!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {29d34dfe-d32b-42a1-a65c-9608bccea182} Other:Win/Miuref.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {3cde1961-7c88-4d7e-9b6e-b71a73cfaa6e} Other:Win/MiurefIdleFraud.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {cef64757-dab2-4900-a13c-cd8fc06b9ef5} Other:Win/MiurefSendData.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {0d81f25a-0b4f-417f-b8f7-40a3d25fd943} Other:Win/MYFWUS.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {f31f6f12-9e2f-4fa5-b11d-59cb70999866} Other:Win/Mytonel.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {e8a58c94-796f-42cd-a65c-99d8d225887d} Other:Win/Neogif.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {994f3f86-2b92-4ef1-9bbb-807b9c8cfe3e} Other:Win/Nivdort.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {3d1d4073-91cd-4a5c-ab57-f924e3eb6790} Other:Win/Nuqel.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {3c3256a0-400e-4f4a-bacd-93d97ceebf5c} Other:Win/Nymaim.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {64766320-0ca6-4173-a4dc-ca8d7eb81d0d} Other:Win/PAMESEG.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {fcb641ac-05e4-47da-834b-c24a9b594f42} Other:Win32/Phorpiex.A.IRC!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {5e91f64b-60ef-4a54-b981-843a4f4bddb3} Other:Win/Pstinb.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {fd922c8e-8fa3-4824-9897-d6ed83c4de58} Other:Win/Proslikefan.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {f0ef2eaf-a20d-4b40-91fd-5a472c315905} Other:Win/PulickCnC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {1a5bb1d1-1c8d-4b8a-b5a1-af6dee0d3ef9} Other:Win/Rebhip.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {a9c65264-587f-4a84-90c8-1de9511310d5} Other:Win/Remnant.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {ee554259-e92b-4528-902a-9f72675795e2} Other:Win/RevetonPayments.Custom!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {75741923-115e-463d-bbc7-19b3a7e5bc51} Other:Win/RopestIdleFraud.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {beb8a902-f046-4408-a984-a59178da1fac} Other:Win/Rottentu.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {6011c172-7be0-4a34-af59-a38c49827d7f} Other:Win/ScGhostRat.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {08a14bbc-ae18-4670-995d-9504b9a606df} Other:Win/ScHcdLoader.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {7e8aa7cc-a30d-4bba-9533-0a65d3118a16} Other:Win/SoftPulse.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {5903328b-24c5-43d4-895c-33f326427a10} Other:Win/SpearphishingA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {373d12f3-533e-4665-9ebf-f96836aecadc} Other:Win/SteamStealer.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {cc391a3a-a326-4332-bcd7-873602706348} Other:Win/SuspCoCC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {73e60f20-5a03-4f4d-a09e-25ba11e9473c} Other:Win/SuspDirs.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {283a88ad-33d0-4cba-bb71-02543118b196} Other:Win/TeschCustom.Tesch!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {9f235900-dfbf-4dc5-9411-7f9f900c121b} Other:Win/Tescrypt.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {04cc148e-e83a-4569-a891-cc89318ccaf2} Other:Win/RAMNIT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {8972f0cf-f447-478c-beb1-88f4eee96908} Other:Win/RAMNIT.CUSTOM!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {91bb65e2-2c89-4d35-ae78-8c9f189cdc57} Other:Win/RENOS.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {db9aeca3-583f-466a-aafd-e2039bd3adfc} Other:Win/SIMDA.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {0751ede2-b4a7-41e0-8980-d253abbb665e} Other:Win/SIREFEF.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {f87a26b0-4176-4c03-80bc-02d57bc27074} Other:Win/Sisbot.A.IRC!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {16e6088b-ab72-434d-8cc2-d51fdfe0dfa3} Other:Win/SWIZZOR.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {b2d07ae0-3ef5-48b9-ac73-3cb946849dfc} Other:Win/Turkjelly.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {8e766363-34db-4ca1-996f-6b8792135e6e} Other:Win/Upatre.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {42adef00-e84a-4e31-9dff-4e195855a49a} Other:Win/URLAwareness.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {b39d3eb2-473f-40bd-b92e-3a541950b674} Other:Win/TestSig.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {089edc48-38d7-4165-bf41-bcaaba06f180} Other:Win/TEDROO.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {86040ae3-5ff0-4368-a6db-b4f25a38b38c} Other:Win/ViknokCnC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {672f7fe9-e909-4424-97dc-a4062f8b35bb} Other:Win/VOBFUS.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {56a9c37d-c665-4d95-a1e4-4fb00afee93a} Other:Win/VUNDO.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {f5a8ca50-4ba6-453c-9af0-c3cfac70bf1d} Other:Win/WALEDAC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {ecfaaf2a-e527-4537-90de-32af3a723440} Other:Win/WINWEBSEC.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {198df45f-dc5a-408d-b8e2-7671b67fa535} Other:Win/WuCall.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {7819b4af-3b7d-47c4-999a-3e0254739da1} Other:Win/XTRAT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {17b5a0b2-7d7e-40a2-848b-c09a9a84c3b9} Other:Win/ZBOT.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {7d299124-5ed1-4be4-942f-07b7aa8a9d7c} Other:Win/ZEGOST.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {bdad9ae3-1cb0-4849-a5da-94c25f554f71} Other:Win/ZegostGenTcpStreamCustom!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {6e4d2f4c-2d44-4aa8-8857-514cc2eec83b} Other:Win/ZegostTcpStreamCustom!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {078d1c6d-456a-40c5-95ff-e710e0e67f22} Other:Win/ZWANGI.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {284c3520-fcd8-44a5-82ed-297ba7d4808c} Other:Win/Malagent.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {47d6ccfc-14df-4325-8e6e-ab70f33f63f3} Other:Win/Tuscrape.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {894cf0e5-c2b7-4dfc-ad6e-018e7107d527} Other:Win/Ogimant.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {24eda918-dfa6-4e7a-badc-7b85dd20a145} Other:Win/WinntiCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {dc92315b-40df-4f8e-af5c-1924ace43a2d} Other:Win/DuquCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {c6932da5-3427-4499-8f59-fd180d85d335} Other:Win/EtumbotCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {8043aecf-8bbd-47c1-af62-7db699c890a6} Other:Win/Solus.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {db007990-6345-40ac-af66-0a488ff3a9a2} Other:Win/SolusCN.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {9c1fd926-f7aa-4c67-a08a-5b86e07dd10f} Other:Win/StrontiumCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {50c754fa-56d7-4f16-874e-346cf2cc3da6} Other:Win/BoronCert.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {b9081acb-1b80-4744-a758-c1585ce4b7a3} Other:Win/BingAds.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {1140e991-b12f-4511-a01b-7cd2c55a1551} Other:Win/AppNexusClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {1344db11-1bc3-4378-bae4-f093441aeb3e} Other:Win/AppNexusMobile.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {c8e694f4-eb43-4ccd-8bf2-a7efbc9fddaf} Other:Win/AppNexusImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {b5867063-a23c-47d7-a0a1-39a976130206} Other:Win/DoubleClickClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {1bd8f392-9dd6-4340-9e58-c8e6ce28f916} Other:Win/DoubleClickImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {cedfcb75-51cb-4f5c-9f4f-3513109e087b} Other:Win/DoubleClickMob.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {2be18879-e1b2-421d-bd58-ba1d7f002b89} Other:Win/MobileGenImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {52f5922e-c33c-408e-b194-577a310a2ada} Other:Win/RubiconImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {c9b7e661-c818-4177-bc9a-273e5958c073} Other:Win/GoogleClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {baa3b342-2486-4877-92a3-fd2ac75205d3} Other:Win/GoogleImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {59a97b9d-b9f4-49d2-8e07-f6aab66e3d05} Other:Win/YahooClick.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {f60d9da0-2863-49c5-98ee-672cd92df19a} Other:Win/YahooImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {14e0ea00-37fe-4109-bd78-1cef72adf272} Other:Win/SimplifiCollect.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {5b419168-2f04-4346-8bbd-cc673b6a4797} Other:Win/SimplifiImp.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] [On ] Sig {30ec694c-88fe-4c8f-a3de-c53d971fcfb9} Other:Win/SimplifiClk.HTTP.HTTP!NIS-0000-0000 - [07/02/16-01:50:30] --Signature list end-- [07/02/16-01:50:30] Signatures: Total: 146; Enabled: 144 [07/02/16-01:50:30] Active signature breakdown: BM: 144; ZeroDay-Block: 0; ZeroDay-Detect: 0; ZeroDay-Detect-Inline: 0 [07/02/16-01:50:30] New engine version=2.1.12706.0; New signature version=116.10.0.0 [07/02/16-01:50:30] Successfully loaded new definitions, Any signature active (0/1): ZeroDay=0, BM=1 [07/02/16-01:50:30] At least one signature is active [07/02/16-01:50:30] Connecting to the driver [07/02/16-01:50:30] NumberOfCompletionPortThreads: 1, NubmerOfInspectionThreads: 12 [07/02/16-01:50:30] Load Definitions completed successfully.